Jamie Nguyen
dysco****@gmail*****
Sat Nov 27 03:30:30 JST 2010
Hi, Toshiharu Harada wrote: > Thank you for moving. I hope you like new home. :-) Yes, perfect :-) > You might think that you don't need that because you use ccs-editpolicy, > however not every information can be found in the editor. > Actually, Tetsuo is planning to eliminate the "learning mode" > in the future. :-) Learning Mode is being removed? I actually think Learning Mode is a very useful stage in the workflow of generating policy. For me, Learning Mode is used to develop policy, without having to worry about log files. The new default profiles in the patch that your colleague posted allow for this to happen. All domains can be set to Learning Mode without having to worry about /var/log filling up with many megabytes of information (assuming ccs-auditd daemon is already running). Only when refining policy for a particular domain need it be set to Permissive Mode, at which point logging to /var/log begins. Kind regards
TOMOYO
Fork