Another selinux rant

[John Dennis]

John Dennis wrote:
> You have two options for receiving the alerts from the headless server.

Oh, forgot to mention, those will get you realtime alert sent to you. 
But you can use sealert in command line mode too.

The alert will be logged to syslog with an ID, then you can:

% sealert -l ID

-or-

You can scan the audit log file (or any other log file) with:

% sealert -a logfile

-- 
John Dennis <jdennis at redhat.com>