[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: kernel 2054 is really broke!



On Wednesday 15 March 2006 13:11, Bill Nottingham wrote:
> Check for SELinux errors (either with dmesg or autrace).

That would be ausearch. ;)

Also,  "aureport -ts 1:00:00"  gives you a quick summary of what's in the 
audit logs since 1am. This requires that the audit daemon has been running.

If its shows avcs, then you can dig in deeper with ausearch:

"ausearch -m avc -i -ts 1:00:00"

-Steve


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]