Stephen John Smoogen <[log in to unmask]> writes:

> I end up tearing my hair out at times.. but its
> usually figuring out why some software does something that no-one
> would believe software would need to do.

An ignorant question: can SELinux be configured to log any action that
it blocks?  I would think this would make finding what software has
gone beyond what expectations pretty obvious.

-Brett.