Added logging CFEngine component related SELinux denials in cf-support

Ticket: ENT-12137 Changelog: title
cfengine · Aug 22, 2024 · 210b176 · 210b176
1 parent 9b59491
commit 210b176
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/misc/cf-support b/misc/cf-support
@@ -380,6 +380,11 @@ else
 fi
 echo "Captured output of $syslog_cmd filtered for cf-|CFEngine"
 
+# cf- component related SELinux denials
+if command -v ausearch >/dev/null; then
+  log_cmd "ausearch -m avc -c cf-"
+fi
+
 gzip_add $WORKDIR/outputs/previous
 gzip_add $WORKDIR/outputs/dc-scripts.log # masterfiles-stage log
 file_add $WORKDIR/policy_server.dat