1setroubleshootd(8) setroubleshootd(8)
2
3
4
6 setroubleshootd - setroubleshoot daemon
7
8
10 setroubleshootd [-b] [- [-h] [-s] [-S] [-l id] [-a file] [-v] [-V] [-u]
11 [-p]
12
13
15 This manual page describes the setroubleshootd program.
16
17 setroubleshootd is the dbus service in the setroubleshoot system.
18 setroubleshoot is used to diagnose SELinux denials and attempts to pro‐
19 vide user friendly explanations for a SELinux denial (e.g. AVC) and
20 recommendations for how one might adjust the system to prevent the
21 denial in the future.
22
23 In a standard configuration setroubleshoot is composed of two compo‐
24 nents, sealert and setroubleshootd.
25
26 setroubleshootd is a system daemon which runs with root privileges and
27 listens for audit events emitted from the kernel related to SELinux.
28 When the setroubleshootd daemon sees an SELinux AVC denial it runs a
29 series of analysis plugins which examines the audit data related to the
30 AVC. It records the results of the analysis and signals any clients
31 which have attached to the setroubleshootd daemon that a new alert has
32 been seen.
33
34
36 -b --browser
37 Launch the browser
38
39 -f --nofork
40 Do not fork the daemon
41
42 -h --help
43 Show this message
44
45 -c --config
46 section.option=value set a configuration value
47
48 -v --verbose
49 log INFO level and higher messages to console
50
51 -V --debug
52 log DEBUG level and higher messages to console
53
54
56 This man page was written by Dan Walsh <dwalsh@redhat.com>.
57
58
60 sealert(8),selinux[1m(8)
61
62
63
64 20100520 setroubleshootd(8)