What is a Denial Event?
A denial event is exactly one operation SELinux denied. It may be reported by the kernel as multiple [#avc-message AVC ]messages . Specialized software such as setroubleshoot has the ability to merge independent AVC messages into single denial events. People often use the term AVC when they really mean denial event. setroubleshoot uses a general method to “label” [#denial-event denial ]events called an [#alert-signature alert signature] .
