[prev in list] [next in list] [prev in thread] [next in thread] 

List:       selinux
Subject:    Re: setroubleshooter/sealert on central loghost?
From:       Steve G <linux_4ever () yahoo ! com>
Date:       2007-08-06 0:36:28
Message-ID: 59794.43337.qm () web51507 ! mail ! re2 ! yahoo ! com
[Download RAW message or body]


>but sealert doesn't show the hostname of the host that sent the
>AVC. Any ideas for how to get the "Host Name" field in the sealert
>browser to show the hostname ? 

Like I was saying, we are just starting to write the code that does this kind of
thing, so nothing anywhere expects it.

>What's the format sealert expects it on ?

The syntax for the field is likely to be node=computer. But its exact placement
and who adds it (auditd vs audispd) is not settled.

-Steve


       
____________________________________________________________________________________
Building a website is a piece of cake. Yahoo! Small Business gives you all the tools to get online.
http://smallbusiness.yahoo.com/webhosting 

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
[prev in list] [next in list] [prev in thread] [next in thread]