In-Reply To: <b93ef9d00807011040j393b6f0aoa261888c20205f7c at mail.gmail.com> On: Tue, 1 Jul 2008 11:40:38 -0600, "drew einhorn" <drew.einhorn at gmail.com> wrote: > There is a setroubleshoot package that runs under X, that really > makes it a lot easier to troubleshoot selinux, but I really don't > want to run X on all my vms. > > Does anyone here know of an equivalent that doesn't require X? 'sealert', the client portion of 'setroubleshoot', runs from the command line as well as under 'x'. Check the man page for sealert. "sealert may also be run in command line mode. The two most useful command line options are -l to "lookup" an alert ID and -a to "analyze" a log file. When setroubleshootd generates a new alert it assigns it a local ID and writes this as a syslog message. The -l lookup option may then be used to retrieve the alert from the setroubleshootd alert database and write it to stdout. This is most useful when setroubleshootd is being run on a headless system without the GUI desktop alert facility." Sincerely, -- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB at Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3