Query audit-related journal entries.
Section: SELinux and AppArmor Basics
Inspect recent audit messages
bash
bash
journalctl -t audit --since '1 hour ago'Explanation
Helpful when security policy blocks access and you need clues quickly.
Learn the surrounding workflow
Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.
Related commands
Same sheet · prioritizing SELinux and AppArmor Basics