[apparmor] [patch] fix logparser.py to support changes syslog format

[Seth Arnold]

On Fri, Jan 16, 2015 at 10:40:39PM +0100, Christian Boltz wrote:
> Hello,
> 
> this patch updates logparser.py to support the changed syslog format by
> adding   (audit:\s+)?   to RE_LOG_v2_6_syslog.
> 
> References: https://bugs.launchpad.net/apparmor/+bug/1399027
> 

Acked-by: Seth Arnold <seth.arnold at canonical.com>

Thanks

> [ logparser-lp1399027.diff ]
> 
> === modified file 'utils/apparmor/logparser.py'
> --- utils/apparmor/logparser.py 2014-08-20 22:55:44 +0000
> +++ utils/apparmor/logparser.py 2015-01-16 21:24:45 +0000
> @@ -25,7 +25,7 @@
>  _ = init_translation()
>  
>  class ReadLog:
> -    RE_LOG_v2_6_syslog = re.compile('kernel:\s+(\[[\d\.\s]+\]\s+)?type=\d+\s+audit\([\d\.\:]+\):\s+apparmor=')
> +    RE_LOG_v2_6_syslog = re.compile('kernel:\s+(\[[\d\.\s]+\]\s+)?(audit:\s+)?type=\d+\s+audit\([\d\.\:]+\):\s+apparmor=')
>      RE_LOG_v2_6_audit = re.compile('type=AVC\s+(msg=)?audit\([\d\.\:]+\):\s+apparmor=')
>      # Used by netdomain to identify the operation types
>      # New socket names
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150116/55b7b388/attachment.pgp>