Hide Forgot
$ sudo sealert -a /var/log/audit/audit.log 10% doneTraceback (most recent call last): File "/usr/lib/python2.7/site-packages/setroubleshoot/analyze.py", line 690, in task self.new_audit_record_handler(record_type, event_id, body_text, fields, line_number) File "/usr/lib/python2.7/site-packages/setroubleshoot/analyze.py", line 717, in new_audit_record_handler self.avc_event_handler(audit_event) File "/usr/lib/python2.7/site-packages/setroubleshoot/analyze.py", line 702, in avc_event_handler avc = AVC(audit_event) File "/usr/lib/python2.7/site-packages/setroubleshoot/audit_data.py", line 635, in __init__ self.derive_avc_info_from_audit_event() File "/usr/lib/python2.7/site-packages/setroubleshoot/audit_data.py", line 913, in derive_avc_info_from_audit_event self._set_tpath() File "/usr/lib/python2.7/site-packages/setroubleshoot/audit_data.py", line 877, in _set_tpath self.tpath = self.decodehex(path) File "/usr/lib/python2.7/site-packages/setroubleshoot/audit_data.py", line 739, in decodehex if not printable(tpath): File "/usr/lib/python2.7/site-packages/setroubleshoot/audit_data.py", line 139, in printable filtered_path = filter(lambda x: x in string.printable, s) TypeError: 'NoneType' object is not iterable ^CTraceback (most recent call last): File "/usr/bin/sealert", line 714, in <module> do_analyze_logfile(logfile) File "/usr/bin/sealert", line 536, in do_analyze_logfile scanner.scan_file() File "/usr/bin/sealert", line 521, in scan_file self.main_loop.run() KeyboardInterrupt
Could you send me your compressed audit log.
Unfortunately, it is no more available.