On 2/5/20 1:39 PM, Thomas Cameron wrote:
On 2/4/20 9:51 AM, sean darcy wrote:
How would I find that out ?
# ps aux | grep setroubleshootd root 1247827 0.0 0.0 112564 896 pts/0 S+ 10:41 0:00 grep --color=auto setroubleshootd # ps aux | grep sealert root 1250561 0.0 0.0 112432 896 pts/0 S+ 10:49 0:00 grep --color=auto sealert #
From the setroubleshootd man page:
setroubleshootd is a system daemon which runs under setroubleshoot user and listens for audit events emitted from the kernel related to SELinux.
Not very helpful, but it doesn't seem there's any daemon running.
ps -axZ | grep trouble
The daemon is only activated as needed, so it's not always running. Did you try that command? Did it find any processes?