SELinux Message

[Trevor]

When an action is denied by SELinux, what type of message does it log?

While I'm here, I might as well also ask, where are those messages logged?

[Blue_bird · Accepted solution]

When SELinux denies an action on Red Hat Linux, it logs an Access Vector Cache (AVC) denial message. These messages are primarily logged to the /var/log/audit/audit.log file.

Thanks

[Trevor · Accepted solution]

Way to go Blue_bird!!!