SELinux troubleshooting

SELinux comes with some tools that are very useful for checking errors and troubleshooting. We already saw one, sealert -l <alert id>, where we gather the alert ID by looking into /var/log/messages. There is another command called ausearch, which is also very helpful in checking errors if the auditd service is running, which is as follows:

ausearch -m avc -c httpd

Get Mastering CentOS 7 Linux Server now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.