Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Logs are not being sent to syslog #326

Open
koldrid opened this issue Dec 9, 2024 · 1 comment
Open

Logs are not being sent to syslog #326

koldrid opened this issue Dec 9, 2024 · 1 comment

Comments

@koldrid
Copy link

koldrid commented Dec 9, 2024

Below are the basic rules that are implemented

## This file is automatically generated from /etc/fapolicyd/rules.d
%languages=application/x-bytecode.ocaml,application/x-bytecode.python,application/java-archive,text/x-java,application/x-java-applet,application/javascript,text/javascript,text/x-awk,text/x-gawk,text/x-lisp,application/x-elc,text/x-lua,text/x-m4,text/x-nftables,text/x-perl,text/x-php,text/x-python,text/x-R,text/x-ruby,text/x-script.guile,text/x-tcl,text/x-luatex,text/x-systemtap
allow perm=any uid=0 : dir=/var/tmp/
allow perm=any uid=0 trust=1 : all
allow perm=open exe=/usr/bin/rpm : all
allow perm=open exe=/usr/bin/python3.9 comm=dnf : all
deny_syslog perm=any pattern=ld_so : all
deny_syslog perm=any all : ftype=application/x-bad-elf
allow perm=open all : ftype=application/x-sharedlib trust=1
deny_syslog perm=open all : ftype=application/x-sharedlib
allow perm=execute all : trust=1
allow perm=open all : ftype=%languages trust=1
deny_syslog perm=any all : ftype=%languages
allow perm=any all : ftype=text/x-shellscript
deny_syslog perm=execute all : all
allow perm=open all : all

If I run Fapolicyd in debug I can see it working but when trying to look at journalctl I do not see any entries for the denies.

@koldrid
Copy link
Author

koldrid commented Dec 9, 2024

RHEL 9.4
fapolicyd-1.3.2-100.el9.x86_64

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant