diff --git a/pages/common/audit2allow.md b/pages/common/audit2allow.md new file mode 100644 index 0000000000..911ab67a26 --- /dev/null +++ b/pages/common/audit2allow.md @@ -0,0 +1,38 @@ +# audit2allow + +> Scan logs for messages pertaining to denied permissions. +> Generate a report of Type Enforcement (TE) rules that might allow successful operations. +> See also `audit2why`. +> More information: . + +- Show all generated messages in audit and message logs: + +`audit2allow {{[-a|--all]}}` + +- Show all generated messages since last boot: + +`audit2allow {{[-b|--boot]}}` + +- Display detailed information around generated messages: + +`audit2allow {{[-e|--explain]}}` + +- Enable verbose output mode: + +`audit2allow {{[-v|--verbose]}}` + +- Use installed macros to generate a reference policy: + +`audit2allow {{[-R|--reference]}}` + +- Specify a policy file for further analysis: + +`audit2allow {{[-p|--policy]}} {{path/to/policyfile}}` + +- Limit analysis to messages with a type specified in `regex`: + +`audit2allow {{[-t|--type]}} {{type_regex}}` + +- Display help: + +`audit2allow {{[-h|--help]}}`