SELinux: disregard 'dontaudit' rules

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Hi people,

Is there a simple way of switching off all 'dontaudit' rules in any
given policy?

My basic problem is that the 'makewhatis' script doesn't work when
SELinux is enforcing, but works when in permissive mode, but I don't
see any messages in the /var/log/messages.

I run Fedora Core 3 with the targeted policy, version 18. There's
something like 602 dontaudit rules in the policy, and editing them all
out seems a little unwise, even if I automate it.

Any simple answers?

Technical Obsolescence warning: rust detected in drive A:

Site Timeline