setroubleshootd(8)

✨ setroubleshootd(8) ✨

okay bestie, welcome to the setroubleshootd manual page, from the setroubleshootd(8) corner of the universe 💖 this is the setroubleshoot daemon and she is that girl

🌸 NAME 🌸

setroubleshootd — the setroubleshoot daemon, no cap

🦋 SYNOPSIS 🦋

setroubleshootd [-d] [-f] [-h] [-c config]

💅 DESCRIPTION 💅

This manual page describes the setroubleshootd program. Yes, the whole thing, we're doing this 💖

setroubleshootd is the dbus service in the setroubleshoot system. So like, setroubleshoot is the whole operation — it's used to diagnose SELinux denials and it attempts to provide user friendly explanations for a SELinux denial (e.g. AVC) plus recommendations for how one might adjust the system to prevent the denial in the future. It's giving "therapist but for your kernel" 🫶

In a standard configuration setroubleshoot is composed of two components: sealert and setroubleshootd. Dynamic duo, fr fr 👑

setroubleshootd is a system daemon which runs under the setroubleshoot user and listens for audit events emitted from the kernel related to SELinux. The way that she just listens 😭 When the setroubleshootd daemon sees an SELinux AVC denial, it runs a series of analysis plugins which examine the audit data related to the AVC. It records the results of the analysis and signals any clients which have attached to the setroubleshootd daemon that a new alert has been seen. So iconic, she's literally telling everybody 💅✨

setroubleshootd is not persistent and only runs when there are new AVCs to be analyzed. Main character energy but make it part-time 🌈 It is executed using setroubleshootd.service, which also limits its priority and maximum RAM utilization to 1GB, in order to help with system responsiveness in case of large amounts of AVCs. Yes bestie, she gets a snack limit, it's for her own good and yours 🍓

🎀 OPTIONS 🎀

• -f, --nofork — do not fork the daemon. she stays right here, no splitting up 🙈
• -d, --debug — do not exit after 10 seconds of inactivity. she's nosy and she's staying 💀
• -h, --help — show this message 👑
• -c, --config — section.option=value — set a configuration value ⭐

💜 AUTHOR 💜

This man page was written by Dan Walsh <dwalsh@redhat.com>. king behaviour, we stan 🫶

🌈 SEE ALSO 🌈

sealert(8), selinux(8) — go read those too bestie, iykyk

and that's the whole page, no cap, every flag accounted for ✨

signing off from the 20100520 era of setroubleshootd(8) — this little cutie is dated 20100520, periodt 💖