semanage-dontaudit - SELinux Policy Management dontaudit tool
Contents
Description
semanage is used to configure certain elements of SELinux policy without requiring modification to or
recompilation from policy sources. semanagedontaudit toggles whether or not dontaudit rules will be in
the policy. Policy writers use dontaudit rules to cause confined applications to use alternative paths.
Dontaudit rules are denied but not reported in the logs. Sometimes dontaudit rules can cause bugs in
applications but policy writers will not realize it since the AVC is not audited. Turn off dontaudit
rules with this command to see if the kernel is blocking an access.
Example
Turn off dontaudit rules
# semanage dontaudit off
Name
semanage-dontaudit-SELinuxPolicyManagementdontaudittool
Options
-h,--help
Show this help message and exit
-SSTORE,--storeSTORE
Select an alternate SELinux Policy Store to manage
-N,--noreload
Do not reload the policy after commit
See Also
selinux(8), semanage(8)
Synopsis
semanagedontaudit[-h][-SSTORE][-N]{on,off}