Merge pull request #5602 from craigcomstock/ENT-12137/master

Added logging CFEngine component related SELinux denials in cf-support

Author: craigcomstock

misc/cf-support

@@ -380,6 +380,11 @@ else
 fi
 echo "Captured output of $syslog_cmd filtered for cf-|CFEngine"
 
+# cf- component related SELinux denials
+if command -v ausearch >/dev/null; then
+  ausearch -m avc -su cfengine > "$tmpdir"/ausearch-cfengine-avcs.log
+fi
+
 gzip_add $WORKDIR/outputs/previous
 gzip_add $WORKDIR/outputs/dc-scripts.log # masterfiles-stage log
 file_add $WORKDIR/policy_server.dat