Skip to content

Commit b199fb0

Browse files
KristopherLeadsManagordmmqzMachiavelliII
authored
audit2allow: add page (#17208)
Co-authored-by: Managor <[email protected]> Co-authored-by: Dylan <[email protected]> Co-authored-by: Machiavelli <[email protected]>
1 parent 24ed341 commit b199fb0

File tree

1 file changed

+38
-0
lines changed

1 file changed

+38
-0
lines changed

pages/common/audit2allow.md

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
# audit2allow
2+
3+
> Scan logs for messages pertaining to denied permissions.
4+
> Generate a report of Type Enforcement (TE) rules that might allow successful operations.
5+
> See also `audit2why`.
6+
> More information: <https://manned.org/audit2allow>.
7+
8+
- Show all generated messages in audit and message logs:
9+
10+
`audit2allow {{[-a|--all]}}`
11+
12+
- Show all generated messages since last boot:
13+
14+
`audit2allow {{[-b|--boot]}}`
15+
16+
- Display detailed information around generated messages:
17+
18+
`audit2allow {{[-e|--explain]}}`
19+
20+
- Enable verbose output mode:
21+
22+
`audit2allow {{[-v|--verbose]}}`
23+
24+
- Use installed macros to generate a reference policy:
25+
26+
`audit2allow {{[-R|--reference]}}`
27+
28+
- Specify a policy file for further analysis:
29+
30+
`audit2allow {{[-p|--policy]}} {{path/to/policyfile}}`
31+
32+
- Limit analysis to messages with a type specified in `regex`:
33+
34+
`audit2allow {{[-t|--type]}} {{type_regex}}`
35+
36+
- Display help:
37+
38+
`audit2allow {{[-h|--help]}}`

0 commit comments

Comments
 (0)