Avcs should show up in the /var/log/messages or the journal even if audit is not running. On 10/18/2015 04:19 AM, Bond Masuda wrote: > I'm running into an issue where SELinux is preventing auditd from > starting. But I can't figure out exactly what SELinux is not happy > about since without auditd, I can't look for AVC messages. I think > SELinux is blocking auditd from starting up because auditd starts up > once I do 'setenforce 0'. > > Any advice? > Bond > _______________________________________________ > Selinux mailing list > Selinux@xxxxxxxxxxxxx > To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. > To get help, send an email containing "help" to > Selinux-request@xxxxxxxxxxxxx. > > _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
