Skip to content

Draft: Handle USER_AVC audit events

Christian Göttsche requested to merge cgzones/setroubleshoot:user_avc into main

Support USER_AVC audit events as systemd and DBUS are quite relevant object managers.

Forward USER_AVC events in sedispatch.

Include object manager details in report on USER_AVC.

TODO: The source of avc denials can not be as easily gathered as on normal ones, as USER_AVC audit events do not contain standardized fields for the actual issuer.

Merge request reports