1setroubleshootd(8)                                          setroubleshootd(8)
2
3
4

NAME

6       setroubleshootd - setroubleshoot daemon
7
8

SYNOPSIS

10       setroubleshootd [-d] [-f] [-h] [-c config]
11
12

DESCRIPTION

14       This manual page describes the setroubleshootd program.
15
16       setroubleshootd  is  the  dbus  service  in  the setroubleshoot system.
17       setroubleshoot is used to diagnose SELinux denials and attempts to pro‐
18       vide  user  friendly  explanations  for a SELinux denial (e.g. AVC) and
19       recommendations for how one might adjust  the  system  to  prevent  the
20       denial in the future.
21
22       In  a  standard  configuration setroubleshoot is composed of two compo‐
23       nents, sealert and setroubleshootd.
24
25       setroubleshootd is a system daemon which runs under setroubleshoot user
26       and  listens  for  audit  events  emitted  from  the  kernel related to
27       SELinux. When the setroubleshootd daemon sees an SELinux AVC denial  it
28       runs a series of analysis plugins which examines the audit data related
29       to the AVC. It records the results of  the  analysis  and  signals  any
30       clients  which  have  attached to the setroubleshootd daemon that a new
31       alert has been seen.
32
33

OPTIONS

35       -f --nofork
36              Do not fork the daemon
37
38       -d --debug
39              Do not exit after 10 seconds
40
41       -h --help
42              Show this message
43
44       -c --config
45              section.option=value     set a configuration value
46
47

AUTHOR

49       This man page was written by Dan Walsh <dwalsh@redhat.com>.
50
51

SEE ALSO

53       sealert(8),selinux(8)
54
55
56
57                                   20100520                 setroubleshootd(8)