diff --git a/articles/SELinux-setroubleshoot.asm.xml b/articles/SELinux-setroubleshoot.asm.xml new file mode 100644 index 000000000..40c8ba055 --- /dev/null +++ b/articles/SELinux-setroubleshoot.asm.xml @@ -0,0 +1,211 @@ + + + + + %entities; +]> + + + + + + + + + + Glue example + + + Glue for more information + + + Glue what's next + + + + + + Concept example + + + + + + Task example + + + + + + Reference example + + + + + + Legal Notice + + + GNU Free Documentation License + + + + + + Tourbleshooting &selnx; using <command>setroubleshoot</command> + Subtitle if necessary + + + + 2054-11-14 + + + + Added sections: + + + + New section on foo to resolve issue bsc#12345 + + New section on foo bar + + + Removed sections: + + Removed section on foo1 to resolve issue bsc#12346 + Removed section on foo1 bar + + + Changed sections: + + Changed section on foo2 to resolve issue bsc#12347 + Changed section on foo2 bar + + + + + + + + + + + + + + + + + + &productname; + + short title for SEO and social media, max. 55 chars + short description, max. 150 chars + ultrashort description for social media, max 55 chars + + + + + https://bugzilla.suse.com/enter_bug.cgi + Smart Docs + Documentation + + maintainer@suse.com + + yes + + + + + WHAT? + + + A system with &selnx; in the enforcing mode may cause access + denials that may prevent application from running correctly. + setroubleshoot is a tool that inteprets these denial messages in a + user-friendly way and also suggests possible solutions. + + + + + WHY? + + + You want to solve access denials caused by &selnx; without decreasing security of + your system. + + + + + EFFORT + + + TBD + + + + + GOAL + + + You will be able to solve &selnx; denial problems. + + + + + REQUIREMENTS + + + + + A running system with enabled &selnx;. + + + + + + + + + + + + + + + + You are a very special concept now! + + + + + + + + + + + + diff --git a/concepts/selinux-AVC-denials.xml b/concepts/selinux-AVC-denials.xml new file mode 100644 index 000000000..059952851 --- /dev/null +++ b/concepts/selinux-AVC-denials.xml @@ -0,0 +1,37 @@ + + + + + %entities; +]> + + + + + + + AVC denials + + + + + Introductory text + + + + + An AVC denial is an message logged when &selnx; denies a service or application access to + a file or a process. + + + You can find those messages in /var/log/audit/audit.log with the type=AVC. + +