From cdb987afb42da238828fb49fdb539a4b9621f8ec Mon Sep 17 00:00:00 2001 From: "Bryn M. Reeves" Date: Fri, 20 Jun 2014 11:01:08 +0100 Subject: [selinux] pass --input-logs when calling ausearch If ausearch is run without a tty it expects log data to be fed on stdin. This causes the selinux plugin to appear to hang when run e.g. over an ssh session. Force the command to use the logs defined in auditd.conf by specifying --input-logs. Signed-off-by: Bryn M. Reeves --- sos/plugins/selinux.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sos/plugins/selinux.py b/sos/plugins/selinux.py index 26124de8..65e24624 100644 --- a/sos/plugins/selinux.py +++ b/sos/plugins/selinux.py @@ -34,7 +34,7 @@ class SELinux(Plugin, RedHatPlugin): "selinuxdefcon root", "selinuxconlist root", "selinuxexeccon /bin/passwd", - "ausearch -m avc,user_avc -ts today", + "ausearch --input-logs -m avc,user_avc -ts today", "semanage -o -" ]) if self.get_option('fixfiles'): -- cgit