[apparmor] Remove parent=XXXX for logging format

John Johansen john.johansen at canonical.com
Thu Dec 8 15:17:12 UTC 2011


I would like to propose we remove the parent=XXXX field from log messages.
This used to be used for fork tracking when we used a single
null-complain-profile.  However we now use a unique profile name in place
of a single null-complain-profile

eg.
  profile="/usr/lib/firefox-8.0/firefox.sh//null-e2"

this provides the parentage
  /usr/lib/firefox-8.0/firefox.sh

and a unique instance to track against
  null-e2


genprof/logprof where updated to support the new syntax several cycles
ago, and I have done a quick test of using them on a log with the
parent=XXXX field removed and everything seemed to work fine.




More information about the AppArmor mailing list