Does SELinux support monitoring accesses to an object type? I would like to log all instances where sensitive files are accessed.


Yes, SELinux can be used to log accesses, not just denied accesses. See this message for some details on how to do it. This documentation may also be useful.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.