avc-audit-report.sh

#!/bin/bash
TIMESTORE="/var/lib/avc-audit-report.last-run"
TMPFILE=`mktemp /tmp/avc-audit-report.XXXXXXXXXX`

if [ -e "$TIMESTORE" ]; then
	LASTRUN=`cat ${TIMESTORE}`
else
	LASTRUN="yesterday"
fi

NOW="`date +'%D %T'`"

/sbin/ausearch --input-logs -ts $LASTRUN --raw | /usr/bin/audit2allow > $TMPFILE

if [ ! -z "`grep -v '^$' ${TMPFILE}`" ]; then
	cat $TMPFILE | mail -s "$HOSTNAME avc report (`/usr/sbin/getenforce`)" mricon@kernel.org
fi

echo -n "$NOW" > $TIMESTORE
rm -f $TMPFILE