>but sealert doesn't show the hostname of the host that sent the
>AVC. Any ideas for how to get the "Host Name" field in the sealert
>browser to show the hostname ? 

Like I was saying, we are just starting to write the code that does this kind of
thing, so nothing anywhere expects it.

>What's the format sealert expects it on ?

The syntax for the field is likely to be node=computer. But its exact placement
and who adds it (auditd vs audispd) is not settled.

-Steve


       
____________________________________________________________________________________
Building a website is a piece of cake. Yahoo! Small Business gives you all the tools to get online.
http://smallbusiness.yahoo.com/webhosting 

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.