Searching SElinux denials

Find out the name of the binary running, might be different from the systemd service name. Here's an example for alertmanager showing todays denials.

sudo ausearch -m avc -c alertmanager -ts today

See also