ausearch -m AVC -ts recent

Category: Security & Hardening

ausearch -m AVC -ts recent

Show recent SELinux denials

Searches audit records for AVC (Access Vector Cache) messages, the log entries SELinux writes for each denied access, limited to recent activity. Denials usually mean the wrong label or a missing boolean. Fix with chcon, semanage fcontext, or setsebool, then re-check.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.