I just ran into this same issue.     To whitelist the application ran the following: fapolicyd-cli --file add /opt/splunk fapolicyd-cli --update systemctl restart fapolicyd   ... View more