SELinux troubleshooting

SELinux comes with some tools that are very useful for checking errors and troubleshooting. We already saw one, sealert -l <alert id>, where we gather the alert ID by looking into /var/log/messages. There is another command called ausearch, which is also very helpful in checking errors if the auditd service is running, which is as follows:

ausearch -m avc -c httpd

Get Mastering CentOS 7 Linux Server now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.