On 2/4/20 9:51 AM, sean darcy wrote:
How would I find that out ?
# ps aux | grep setroubleshootd root 1247827 0.0 0.0 112564 896 pts/0 S+ 10:41 0:00 grep --color=auto setroubleshootd # ps aux | grep sealert root 1250561 0.0 0.0 112432 896 pts/0 S+ 10:49 0:00 grep --color=auto sealert #
From the setroubleshootd man page:
setroubleshootd is a system daemon which runs under setroubleshoot user and listens for audit events emitted from the kernel related to SELinux.
Not very helpful, but it doesn't seem there's any daemon running.
ps -axZ | grep trouble
Thomas