Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Is there any relation between auditd and SELinux? Or can we use auditd even if SELinux is disabled?
SELinux uses auditd for logging purposes, but auditd is independent from it. You can use auditd without SELinux present.