audit2why
Explain SELinux denials from audit logs. tldr-pages
On Linux
Linux
Explain SELinux denials from audit logs. Part of the policycoreutils-python-utils package.
Explain the most recent SELinux denial
sudo audit2whyIdentifyExplain SELinux denials from a specific audit log file
sudo audit2why --input path/to/audit.logIdentifyExplain all SELinux denials from the audit log
sudo ausearch --message avc | audit2whyIdentifyExplain denials for a specific service
sudo ausearch --message avc --comm service_name | audit2whyIdentify