diff --git a/misc/cf-support b/misc/cf-support
index 1d3ae96af3..b33dfc95f6 100755
--- a/misc/cf-support
+++ b/misc/cf-support
@@ -380,6 +380,11 @@ else
 fi
 echo "Captured output of $syslog_cmd filtered for cf-|CFEngine"
 
+# cf- component related SELinux denials
+if command -v ausearch >/dev/null; then
+  log_cmd "ausearch -m avc -c cf-"
+fi
+
 gzip_add $WORKDIR/outputs/previous
 gzip_add $WORKDIR/outputs/dc-scripts.log # masterfiles-stage log
 file_add $WORKDIR/policy_server.dat