How to Check SELinux Logs

Primary Log Location

sudo cat /var/log/audit/audit.log | grep denied

Using ausearch

sudo ausearch -m avc -ts today

Using sealert (setroubleshoot)

sudo apt install setroubleshoot -y
sudo sealert -a /var/log/audit/audit.log

Real-Time Monitoring

sudo tail -f /var/log/audit/audit.log | grep denied

Human-Readable Summary

sudo grep "denied" /var/log/audit/audit.log | audit2allow -b