[CentOS] Logwatch verbosity

Tue Sep 21 14:06:09 UTC 2010
m.roth at 5-cent.us <m.roth at 5-cent.us>

Tim,

Timothy Murphy wrote:
> I'm getting literally hundreds of lines in my daily logwatch
> (under Centos-5.5), reading
> ---------------------------------------
> NULL security context for user, but SELinux in permissive mode,
> 	continuing ()
> ---------------------------------------
>
> These began when I started running fail2ban (with shorewall),
> though that is probably a coincidence.
>
> In any case, what does this line mean,
> and is there any way of stopping it (short of stopping selinux)?
>
Sounds to me as though it's *not* a coincidence. Who does fail2ban run as
- for us, it's root, but is it different for you?

         mark