SELinux troubleshooting
SELinux comes with some tools that are very useful for checking errors and troubleshooting. We already saw one, sealert -l <alert id>
, where we gather the alert ID by looking into /var/log/messages
. There is another command called ausearch
, which is also very helpful in checking errors if the auditd
service is running, which is as follows:
ausearch -m avc -c httpd