seaudit (8) - Linux Man Pages
seaudit: SELinux graphical audit log analysis tool
NAMEseaudit - SELinux graphical audit log analysis tool
SYNOPSISseaudit [OPTIONS] [POLICY ...]
seaudit supports loading a SELinux policy in one of four formats.
- A single text file containing policy source for versions 12 through 21. This file is usually named policy.conf.
- A single file containing a monolithic kernel binary policy for versions 15 through 21. This file is usually named by version - for example, policy.20.
- A list of policy packages each containing a loadable policy module. The first module listed must be a base module.
- policy list
- A single text file containing all the information needed to load a policy, usually exported by SETools graphical utilities.
If no policy file is provided, seaudit will search for the system default policy: checking first for a source policy, next for a binary policy matching the running kernel's preferred version, and finally for the highest version that can be found. If no policy can be found, seaudit will begin with no policy loaded.
- -l FILE, --log=FILE
- Upon startup, open the log FILE instead of the system log file.
- -h, --help
- Print help information and exit.
- -V, --version
- Print version information and exit.
AUTHORThis manual page was written by Jeremy A. Mowery <jmowery [at] tresys.com>.
COPYRIGHTCopyright(C) 2006-2007 Tresys Technology, LLC
BUGSPlease report bugs via an email to setools-bugs [at] tresys.com.