sealert

Analyze and explain SELinux AVC denial messages. tldr-pages

On Linux

Linux

Analyze and explain SELinux AVC denial messages. Part of the setroubleshoot-server package.

Analyze all recent SELinux denials

sudo sealert --analyze /var/log/audit/audit.logIdentify

Analyze a specific alert ID from system logs

sudo sealert --lookupid alert_idIdentify

Display a summary of recent SELinux alerts

sudo sealert --browserIdentify

Monitor audit log in real-time for new alerts

sudo tail --follow /var/log/audit/audit.log | sealert --lookupid -Identify