This repository has been archived by the owner on Dec 9, 2022. It is now read-only.
All users have the permission to stop setroubleshootd #94
Comments
|
Setroubleshoot is not security sensitive application. Deleting alert only deletes the analysis by setroubleshoot, not the AVC itself. When stopped, setroubleshootd is restarted again any time new AVC is logged. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
According the configuration of org.fedoraproject.Setroubleshootd.conf, all users can send start/finish/delete_alert/... command. It seems better to grant permissions only to the root and setroubleshoot users.
The text was updated successfully, but these errors were encountered: