Skip to content

Commit a1052a5

Browse files
pranlawatedmmqz
andauthored
sealert: add page (#18456)
Co-authored-by: Dylan <[email protected]>
1 parent f0f76c4 commit a1052a5

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed

pages/linux/sealert.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# sealert
2+
3+
> Analyze and explain SELinux AVC denial messages.
4+
> Part of the `setroubleshoot-server` package.
5+
> See also: `audit2why`, `ausearch`, `audit2allow`.
6+
> More information: <https://manned.org/sealert>.
7+
8+
- Analyze all recent SELinux denials:
9+
10+
`sudo sealert {{[-a|--analyze]}} {{/var/log/audit/audit.log}}`
11+
12+
- Analyze a specific alert ID from system logs:
13+
14+
`sudo sealert {{[-l|--lookupid]}} {{alert_id}}`
15+
16+
- Display a summary of recent SELinux alerts:
17+
18+
`sudo sealert {{[-b|--browser]}}`
19+
20+
- Monitor audit log in real-time for new alerts:
21+
22+
`sudo tail {{[-f|--follow]}} {{/var/log/audit/audit.log}} | sealert {{[-l|--lookupid]}} -`

0 commit comments

Comments
 (0)