Tim,
Timothy Murphy wrote:
> I'm getting literally hundreds of lines in my daily logwatch
> (under Centos-5.5), reading
> ---------------------------------------
> NULL security context for user, but SELinux in permissive mode,
> continuing ()
> ---------------------------------------
>
> These began when I started running fail2ban (with shorewall),
> though that is probably a coincidence.
>
> In any case, what does this line mean,
> and is there any way of stopping it (short of stopping selinux)?
>
Sounds to me as though it's *not* a coincidence. Who does fail2ban run as
- for us, it's root, but is it different for you?
mark