Bug 427421
Summary: | Need a way to permanently ignore specific AVC logs | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Daniel Berrangé <berrange> |
Component: | setroubleshoot | Assignee: | John Dennis <jdennis> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | 8 | Keywords: | Reopened |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | 2.0.4-3.fc8 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-02-28 21:43:48 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Daniel Berrangé
2008-01-03 18:22:50 UTC
This is precisely the purpose of the "Filter" checkbox in the browser. Check the filter checkbox for the alert and you won't be alerted for that AVC. BTW, I'm aware the name column name "Filter" is probably a poor choice. The name came into existence because the "alert is filtered", but most user's won't make that connection. FWIW, I've updated the column name in the latest version to be "Quiet", hopefully that will be more intuitive. This merely removes the status bar icon alert AFAICT - the 'filtered' AVCs are still shown in the big browser list of AVCs. Its desirable to have them hidden there too since that listing of AVCs can get enourmous otherwise. As a workaround you can mark the alert as deleted and then under the View memu select "Hide Deleted". This works much like a IMAP email client. Would you be happy with a view option which hid quiet alerts? That way you wouldn't see any alerts which were marked as "quiet", this would be independent of the delete status. Oh, BTW the number of alerts should never be huge. We try to coalesce similar alerts into a single alert. This was somewhat broken in some releases, if you're getting a huge number I'd like to know what they are. Also, recent vintage releases will automatically prune the number of active alerts to keep things managible, I think the default is 30, it's a configuration parameter in /etc/setroubleshoot/setroubleshoot.cfg. I'm getting a huge number because of a couple of particular applications I'm experimenting with which have some serious flaws, hence really do generate lots of unique / different AVCs. A view option to hide any 'quiet' alerts would work for me. O.K. done. I've implemented "hide quiet". Should appear in next build, probably setroubleshoot-2.0.1-1 setroubleshoot-2.0.2-1.fc8 has been pushed to the Fedora 8 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update setroubleshoot' setroubleshoot-plugins-2.0.4-3.fc8,setroubleshoot-2.0.5-2.fc8 has been submitted as an update for Fedora 8 setroubleshoot-plugins-2.0.4-3.fc8, setroubleshoot-2.0.5-2.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report. |