I have some systems that have AVCs pending in sealert that I cannot process. Wen I try the suggested auxsearch command, it comes back with “nothing to do”. I then end up with stale alerts and no way to get rid of them.
Documentation suggests that with the GUI for sealert, that I should be able to delete these entries. However, the systems on which I have accumulated these are all headless without X-Windows installed (nor do I want to install X-Windows on these systems).
How is one supposed to clear out such stale alerts on a headless system?