1

Does SELinux support monitoring accesses to an object type? I would like to log all instances where sensitive files are accessed.

user7014
  • 141
  • 1
  • 3

1 Answers1

1

Yes, SELinux can be used to log accesses, not just denied accesses. See this message for some details on how to do it. This documentation may also be useful.

Thomas Pornin
  • 326,555
  • 60
  • 792
  • 962