Changes between Version 7 and Version 8 of SystemAdministration/Centos

Timestamp:

04/21/17 07:46:19 (7 years ago)

Author:

Willem Elbers

Comment:

--

SystemAdministration/Centos

@@ -1 +1 @@
 == Updating ==
-Before updating check the https://trac.clarin.eu/wiki/SystemAdministration#Updates table for any pending updates which '''must''' be included.
+Before updating check the https://trac.clarin.eu/wiki/SystemAdministration#Updates table for any pending updates which '''must''' be included.
 
 Update cache:
@@ -33 +33 @@
 
 == SELinux ==
-<to be filled in>
+
+=== Searching audit log ===
+
+Check for any denials:
+{{{
+ausearch -m avc                              #all denials       
+ausearch -m avc -ts today              #denials for that today  
+ausearch -m avc -ts recent             #denials from the last 10 minutes        
+}}}
+
+Check entries for a specific service:
+{{{
+ausearch -c docker                      #all audit entries for the docker service
+ausearch -m avc -c docker          #all denials for the docker service
+}}}
+
+Reference: !https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/sect-Security-Enhanced_Linux-Fixing_Problems-Searching_For_and_Viewing_Denials.html