Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

where SELinux writes it's alerts?
I searched in google and man but not found this.
I did tail -f to /var/log/secure, but also there, the lines were not added when SELinux policy violation took place.
More of this, anyone remember the toolbar's Gnome applet that blinking at the policy violation?

Thank you for ahead.

share|improve this question
up vote 3 down vote accepted

Have you checked /var/log/audit/audit.log, as explained in this document?

I suppose the GNOME applet is sealert, a part of setroubleshoot.

share|improve this answer
Thank you very much! So I only want to add that audit.log will hold messsages of SELinux only if auditd service is up, otherwise the messages will be in /var/log/message. And if some one have troubles with using sealert (like me) so you may to install selools-gui package. It will add "SELinux Audit Log Analizer" to System -> Administration. Remember to do: File -> Open Log -> /var/log/audit/audit.log – Rodnower Aug 23 '10 at 10:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.