cancel
Showing results for 
Search instead for 
Did you mean: 
Trevor
Starfighter Starfighter
Starfighter
  • 303 Views

SELinux log records

Write the command that will list all SELinux log records that contain
to the following SELinux label:    system_u:object_r:httpd_log_t:s0

Trevor "Red Hat Evangelist" Chandler
2 Replies
Tracy_Baker
Starfighter Starfighter
Starfighter
  • 277 Views

This may depend on whether auditd is running or not (by default it is).

If it is:

# grep 'system_u:object_r:httpd_log_t:s0' /var/log/audit/audit.log

If it isn't (you can search here, too, anyway):

# grep 'system_u:object_r:httpd_log_t:s0' /var/log/messages

You can also look here:

# journalctl | grep 'system_u:object_r:httpd_log_t:s0'

Program Lead at Arizona's first Red Hat Academy, est. 2005
Estrella Mountain Community College
Trevor
Starfighter Starfighter
Starfighter
  • 237 Views

There you go flexing again Tracy

What I was trying to lead folks in the direction of was:

#  journalctl      _SELINUX_CONTEXT=system_u:object_r:httpd_log_t:s0

 

Thanks for your extra spices.  Once again, you've proven, there's more ways
than one to skin a cat!!!!

Trevor "Red Hat Evangelist" Chandler
0 Kudos
Join the discussion
You must log in to join this conversation.