[DSE-User] Audit data collection?

[Jason Riedy]

And Erich Schubert writes:
> There is 'setroubleshootd', but it's not yet packaged for Debian
> AFAIK.

It also takes a whole CPU to itself and grows to a major memory
hog.  Or at least that was my experience on a Fedora system.

I'm more interested in post-processing a few days of common
usage.  But, as I said, I don't have time to learn the SELinux
languages and terminology right now.  Guess I'll continue to put
off using it.  (One of my big offenders right now seems to be the
resolvconf system, which is already noted in bugs.)

One of the SELinux groups should start up a community audit data
collector, although that might cut into their consulting
revenue...  Feel free to hint that upstream.  ;)

Thanks!

Jason