Draft: Handle USER_AVC audit events (!19) · Merge requests · setroubleshoot / setroubleshoot

Christian Göttsche requested to merge cgzones/setroubleshoot:user_avc into main May 13, 2022

Support USER_AVC audit events as systemd and DBUS are quite relevant object managers.

Forward USER_AVC events in sedispatch.

Include object manager details in report on USER_AVC.

TODO: The source of avc denials can not be as easily gathered as on normal ones, as USER_AVC audit events do not contain standardized fields for the actual issuer.

Draft: Handle USER_AVC audit events

Merge request reports