---
name: "seaudit"
section: "8"
platform: "linux"
package: "setools-gui"
version: "3.3.8-3.1"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/seaudit"
---

# seaudit(8)

SELinux graphical audit log analysis tool

## NAME

seaudit - SELinux graphical audit log analysis tool

## SYNOPSIS

**seaudit** \[OPTIONS\] \[POLICY ...\]

## DESCRIPTION

**seaudit** allows the user to view and filter the contents of a log file. **seaudit** supports the syslog and auditd log formats and provides queries to inspect the SELinux policy based on log messages.

## POLICY

**seaudit** supports loading a SELinux policy in one of four formats.

- source

  A single text file containing policy source for versions 12 through 21. This file is usually named policy.conf.

- binary

  A single file containing a monolithic kernel binary policy for versions 15 through 21. This file is usually named by version - for example, policy.20.

- modular

  A list of policy packages each containing a loadable policy module. The first module listed must be a base module.

- policy list

  A single text file containing all the information needed to load a policy, usually exported by SETools graphical utilities.

If no policy file is provided, **seaudit** will search for the system default policy: checking first for a source policy, next for a binary policy matching the running kernel's preferred version, and finally for the highest version that can be found. If no policy can be found, **seaudit** will begin with no policy loaded.

## OPTIONS

- \-l FILE, --log=FILE

  Upon startup, open the log FILE instead of the system log file.

- \-h, --help

  Print help information and exit.

- \-V, --version

  Print version information and exit.

## AUTHOR

This manual page was written by Jeremy A. Mowery \<jmowery@tresys.com\>.

## COPYRIGHT

Copyright(C) 2006-2007 Tresys Technology, LLC

## BUGS

Please report bugs via an email to setools-bugs@tresys.com.

## SEE ALSO

[seaudit-report(8)](/seaudit-report/8.md)