[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: 20051021:SELINUX and LDM logging

Ben,

> To: address@hidden
> cc: address@hidden
> From: address@hidden
> Subject: SELINUX and LDM logging
> Organization: UCAR/Unidata
> Keywords: 200510211816.j9LIG77s019027

The above message contained the following:

> The Desktop Computing Support staff here in the department have reservations
> about disabling SELINUX on our LDM machine.  Is there a way to enable logging
> without disabling SELINUX?

We're inexperienced with SELINUX.  However, based on a cursory reading
of

    http://fedora.redhat.com/docs/selinux-faq-fc3/

it appears possible to get the syslog(8) daemon to write to a log file
that lies outside the "acceptable" directory -- without disabling SELINUX
altogether -- by appropriately modifying the file "syslogd.te".

We're going to experiment with this and hope to let you know.

> Thanks,
> Ben

Regards,
Steve Emmerson
LDM Developer

> NOTE: All email exchanges with Unidata User Support are recorded in the
> Unidata inquiry tracking system and then made publicly available
> through the web.  If you do not want to have your interactions made
> available in this way, you must let us know in each email you send to us.