Selinux Alerts

[Daniel J Walsh]

On 01/07/2010 10:19 AM, tony at specialistdevelopment.com wrote:
> Hi guys,
> 
> Im getting selinux alerts logged to audit.log, is there anyway to parse
> the alerts via the command line to get human readable alerts?
> 
> I have read that you can install setroubleshoot, but installs a huge
> list of dependencies for use with the gui, but i dont have a gui installed.
> 
> Any ideas?
> 
> Tony
> 
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> 
> 
You can install setroubleshoot-server and set it up to send email. 

audit2allow -la

Will generate a list of audit2allow rules, which is what I usually do.