I have a php script that generates an selinux avc denial when it tries to exec a bash script.
Here is the alert:
SELinux is preventing /usr/bin/bash from execute access on the file /opt/cps/rcm/upsample.
You can generate a local policy module to dontaudit this access.
# grep /usr/bin/bash /var/log/audit/audit.log | audit2allow -D -M mypol
# semodule -i mypol.pp
How about auto editing the info file? this can be done for the size and the extension name...Change Title field:Code:sed -i 's!^Title:.*$!Title:\t\t$F!' $F.infoChange Size field:[code]sed -i 's!^Size:.*$!Size:\t\t`du -h $F | cut -f 1`!' $F....
I'm trying to put together a grep command that will search a file (audit.log) for USERNAME=n where n is an unknown string and DATETIME=n n where both n's represent two 3-character values (day and month).