[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Another selinux rant



John Dennis wrote:
You have two options for receiving the alerts from the headless server.

Oh, forgot to mention, those will get you realtime alert sent to you. But you can use sealert in command line mode too.

The alert will be logged to syslog with an ID, then you can:

% sealert -l ID

-or-

You can scan the audit log file (or any other log file) with:

% sealert -a logfile

--
John Dennis <jdennis redhat com>


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]