[apparmor] Remove parent=XXXX for logging format
John Johansen
john.johansen at canonical.com
Thu Dec 8 15:17:12 UTC 2011
I would like to propose we remove the parent=XXXX field from log messages.
This used to be used for fork tracking when we used a single
null-complain-profile. However we now use a unique profile name in place
of a single null-complain-profile
eg.
profile="/usr/lib/firefox-8.0/firefox.sh//null-e2"
this provides the parentage
/usr/lib/firefox-8.0/firefox.sh
and a unique instance to track against
null-e2
genprof/logprof where updated to support the new syntax several cycles
ago, and I have done a quick test of using them on a log with the
parent=XXXX field removed and everything seemed to work fine.
More information about the AppArmor
mailing list