Red Hat Bugzilla – Bug 249385
Proposed correction: RHEL5 currently ship with an audit daemon
Last modified: 2016-06-17 17:05:57 EDT
Description of problem:
Documentation said "Red Hat Enterprise Linux 5 does not currently ship with an
audit daemon." and "The Red Hat Enterprise Linux 5 implementation of SELinux
routes AVC audit messages to /var/log/messages."
But RHEL5 currently ship with an audit daemon. And setroubleshootd explain and
routes SELinux message to /var/log/messages (based on AVC audit messages in
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Open Deployment_Guide, chapter 44.3. Analyst Control of SELinux
2. Look at note after paragraph 44.3.1.
3. Look at paragraph 44.3.2
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux major release. Product Management has requested further
review of this request by Red Hat Engineering, for potential inclusion in a Red
Hat Enterprise Linux Major release. This request is not yet committed for
Fixed in upcoming SELinux User Guide for RHEL6 (which is based on Fedora SELinux User Guide available at http://docs.fedoraproject.org )
Coverage of the audit daemon and logging etc. is included.