more SELinux details

2024-06-14 15:05:47 +02:00
parent 21866cfa2b
commit abb42e726b
3 changed files with 80 additions and 17 deletions
@@ -76,6 +76,14 @@ ausearch -ts 14:28 --raw | audit2allow -M my-application

 This will create a `my-application.te` policy file with the source code (e.g. to be modified and distributed with Ansible or Puppet) and the copiled `my-application.pp` policy file.

+If you just need the TE source code as output (e.g. for Puppet), then do
+
+```bash
+ausearch -ts 14:28 --raw | audit2allow -r -m my-application
+```
+
+See [SELinux Configuration](../configuration/selinux_configuration)` how to add such a module to Hiera for Puppet.
+
 To install the new SELinux policy file run
 ```bash
 semodule --install my-application.pp