Where are SELinux AVC messages (denial logs, etc.) stored?
In Fedora Core 2 and 3, SELinux AVC messages could be found in /var/log/messages. In Fedora Core 4, the audit daemon was added, and these messages moved to /var/log/audit/audit.log. In Fedora Core 5, the audit daemon is not installed by default, and consequently these messages can be found in /var/log/messages unless you choose to install and enable the audit daemon, in which case AVC messages will be in /var/log/audit/audit.log.
Related Questions
- I get a specific permission denial only when SELinux is in enforcing mode, but I don see any audit messages in /var/log/messages. How can I identify the cause of these silent denials?
- Will the messages stored on my ROLM PhoneMail be transferred automatically to my Unity Voice Mail?
- Where are SELinux AVC messages (denial logs, etc.) stored?
