There is a setroubleshoot package that
runs under X, that really makes it a lot easier to troubleshoot
selinux, but I really don't want to run X on all my vms.

Does anyone here know of an equivalent that doesn't
require X?

--
Drew Einhorn