From 06851ee0bfdbc786a7e4475853e7a49ba0b47a60 Mon Sep 17 00:00:00 2001 From: Kristopher Date: Fri, 11 Jul 2025 13:33:44 -0700 Subject: [PATCH 1/6] Create audit2allow.md --- pages/common/audit2allow.md | 38 +++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 pages/common/audit2allow.md diff --git a/pages/common/audit2allow.md b/pages/common/audit2allow.md new file mode 100644 index 00000000000000..bf2b9f521b252a --- /dev/null +++ b/pages/common/audit2allow.md @@ -0,0 +1,38 @@ +# audit2allow + +> Scans logs for messages pertaining to denied permissions. +> Generates a report of Type Enforcement (TE) rules that might allow successful operations. +> See also `audit2why`. +> More information: . + +- Show all generated messages in audit and message logs: + +`audit2allow {{[-a|--all]}}` + +- Show all generated messages since last boot: + +`audit2allow {{[-b|--boot]}}` + +- Display detailed information around generated messages: + +`audit2allow {{[-e|--explain]}}` + +- Enable verbose output mode: + +`audit2allow {{[-v|--verbose]}}` + +- Use installed macros to generate a reference policy: + +`audit2allow {{[-R|--reference]}}` + +- Specify a policy file for further analysis: + +`audit2allow {{[-p|--policy]}} ` + +- Limit analysis to messages with a type specified in `RegEx`: + +`audit2allow {{[-t|--type]}} {{type_regex}}` + +- Show help: + +`audit2allow {{[-h|--help]}}` From 722346d6ef276053868649ac73e36ce17579b034 Mon Sep 17 00:00:00 2001 From: Kristopher Date: Sat, 12 Jul 2025 07:43:23 -0700 Subject: [PATCH 2/6] Update pages/common/audit2allow.md Co-authored-by: Managor <42655600+Managor@users.noreply.github.com> --- pages/common/audit2allow.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/common/audit2allow.md b/pages/common/audit2allow.md index bf2b9f521b252a..6cca8b3035a8a3 100644 --- a/pages/common/audit2allow.md +++ b/pages/common/audit2allow.md @@ -27,7 +27,7 @@ - Specify a policy file for further analysis: -`audit2allow {{[-p|--policy]}} ` +`audit2allow {{[-p|--policy]}} {{path/to/policyfile}}` - Limit analysis to messages with a type specified in `RegEx`: From 1da99e9d798e85afc007c3a527f13301ebe95268 Mon Sep 17 00:00:00 2001 From: Kristopher Date: Sat, 12 Jul 2025 07:43:42 -0700 Subject: [PATCH 3/6] Update pages/common/audit2allow.md Co-authored-by: Dylan <145150333+dmmqz@users.noreply.github.com> --- pages/common/audit2allow.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/common/audit2allow.md b/pages/common/audit2allow.md index 6cca8b3035a8a3..74e262dbb49894 100644 --- a/pages/common/audit2allow.md +++ b/pages/common/audit2allow.md @@ -1,6 +1,6 @@ # audit2allow -> Scans logs for messages pertaining to denied permissions. +> Scan logs for messages pertaining to denied permissions. > Generates a report of Type Enforcement (TE) rules that might allow successful operations. > See also `audit2why`. > More information: . From 50fdf0bfe7b8184a9117e2fb60135f43defe2a0a Mon Sep 17 00:00:00 2001 From: Kristopher Date: Sat, 12 Jul 2025 07:43:48 -0700 Subject: [PATCH 4/6] Update pages/common/audit2allow.md Co-authored-by: Dylan <145150333+dmmqz@users.noreply.github.com> --- pages/common/audit2allow.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/common/audit2allow.md b/pages/common/audit2allow.md index 74e262dbb49894..3cd6a11e7c60a9 100644 --- a/pages/common/audit2allow.md +++ b/pages/common/audit2allow.md @@ -1,7 +1,7 @@ # audit2allow > Scan logs for messages pertaining to denied permissions. -> Generates a report of Type Enforcement (TE) rules that might allow successful operations. +> Generate a report of Type Enforcement (TE) rules that might allow successful operations. > See also `audit2why`. > More information: . From df627186c804d148954036c0806154d813e9a2bf Mon Sep 17 00:00:00 2001 From: Kristopher Date: Sun, 20 Jul 2025 15:03:22 -0700 Subject: [PATCH 5/6] Update audit2allow.md Co-authored-by: Machiavelli <145562237+MachiavelliII@users.noreply.github.com> --- pages/common/audit2allow.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/common/audit2allow.md b/pages/common/audit2allow.md index 3cd6a11e7c60a9..c850b1b45ecc5e 100644 --- a/pages/common/audit2allow.md +++ b/pages/common/audit2allow.md @@ -29,7 +29,7 @@ `audit2allow {{[-p|--policy]}} {{path/to/policyfile}}` -- Limit analysis to messages with a type specified in `RegEx`: +- Limit analysis to messages with a type specified in `regex`: `audit2allow {{[-t|--type]}} {{type_regex}}` From 88aacd1aadd5bd634752f627e6d925fea4b247e6 Mon Sep 17 00:00:00 2001 From: Kristopher Date: Tue, 22 Jul 2025 10:41:41 -0700 Subject: [PATCH 6/6] Update pages/common/audit2allow.md Co-authored-by: Dylan <145150333+dmmqz@users.noreply.github.com> --- pages/common/audit2allow.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/common/audit2allow.md b/pages/common/audit2allow.md index c850b1b45ecc5e..911ab67a26c1a1 100644 --- a/pages/common/audit2allow.md +++ b/pages/common/audit2allow.md @@ -33,6 +33,6 @@ `audit2allow {{[-t|--type]}} {{type_regex}}` -- Show help: +- Display help: `audit2allow {{[-h|--help]}}`