audit2allow: add page (#18446)

Co-authored-by: Managor <42655600+Managor@users.noreply.github.com>

pages/common/audit2allow.md

@@ -1,38 +0,0 @@
-# audit2allow
-
-> Scan logs for messages pertaining to denied permissions.
-> Generate a report of Type Enforcement (TE) rules that might allow successful operations.
-> See also: `audit2why`.
-> More information: <https://manned.org/audit2allow>.
-
-- Show all generated messages in audit and message logs:
-
-`audit2allow {{[-a|--all]}}`
-
-- Show all generated messages since last boot:
-
-`audit2allow {{[-b|--boot]}}`
-
-- Display detailed information around generated messages:
-
-`audit2allow {{[-e|--explain]}}`
-
-- Enable verbose output mode:
-
-`audit2allow {{[-v|--verbose]}}`
-
-- Use installed macros to generate a reference policy:
-
-`audit2allow {{[-R|--reference]}}`
-
-- Specify a policy file for further analysis:
-
-`audit2allow {{[-p|--policy]}} {{path/to/policyfile}}`
-
-- Limit analysis to messages with a type specified in `regex`:
-
-`audit2allow {{[-t|--type]}} {{type_regex}}`
-
-- Display help:
-
-`audit2allow {{[-h|--help]}}`

pages/linux/audit2allow.md

@@ -0,0 +1,38 @@
+# audit2allow
+
+> Generate SELinux policy allow rules from audit logs.
+> Part of the `policycoreutils-python-utils` package.
+> See also: `audit2why`, `ausearch`, `semodule`.
+> More information: <https://manned.org/audit2allow>.
+
+- Generate allow rules from recent audit denials and display them:
+
+`sudo audit2allow {{[-a|--all]}}`
+
+- Generate allow rules from a specific audit log file:
+
+`sudo audit2allow {{[-i|--input]}} {{path/to/audit.log}}`
+
+- Generate a policy module from recent audit denials:
+
+`sudo audit2allow {{[-a|--all]}} {{[-M|--module]}} {{module_name}}`
+
+- Explain why SELinux denials occurred (same as `audit2why`):
+
+`sudo audit2allow {{[-a|--all]}} --why`
+
+- Display detailed information around generated messages:
+
+`sudo audit2allow {{[-a|--all]}} {{[-e|--explain]}}`
+
+- Use installed macros to generate a reference policy:
+
+`sudo audit2allow {{[-a|--all]}} {{[-R|--reference]}}`
+
+- Generate allow rules for a specific service:
+
+`sudo ausearch {{[-m|--message]}} avc {{[-c|--comm]}} {{service_name}} | audit2allow {{[-M|--module]}} {{policy_name}}`
+
+- Enable verbose output mode:
+
+`sudo audit2allow {{[-a|--all]}} {{[-v|--verbose]}}`