Sample Header Ad - 728x90

SELinux Blocking Actions in AuditD Plugin – How to Resolve Without Switching to Permissive Mode?

0 votes
0 answers
59 views
**Problem:** I'm facing an issue where SELinux is blocking certain actions of my application, which runs as a plugin for auditd. I've been trying to generate the necessary SELinux policy using audit2allow, but some actions still aren't resolved. Even after enabling ghost denial logs, the problem persists. I want to run my application without setting SELinux or auditd to permissive mode, as I need to maintain security features. **Steps taken so far:** 1. Generated custom SELinux policies using audit2allow based on the logs. 2. Enabled ghost denials to capture more detailed logs. 3. Tried running the application while SELinux is in enforcing mode, but some actions are still blocked. **What I'm looking for:** Are there any alternative approaches or best practices to allow my application to run smoothly without disabling SELinux or switching to permissive mode? Any insights or suggestions would be greatly appreciated!
Asked by RSVN (1 rep)
Apr 8, 2025, 06:05 AM
Last activity: Apr 8, 2025, 06:06 AM