There are two components to SELinux alerting mechanisms, both of which are documented. For GUI notifications open the sealert app and disable alerts. For journ

There are two components to SELinux alerting mechanisms, both of which are documented. For GUI notifications open the sealert app and disable alerts. For journal/syslog reports disable the setroubleshoot daemon dispatch plugin for auditd: sed -i 's/active.=.yes/active = no/' /etc/audit/plugins.d/sedispatch.conf service auditd restart You can also uninstall the setroublshoot-server package completely, and all AVC denials will continue be reported separately outside of the journal.