[apparmor] program with a space in the name results in hashes where names should be

Christian Boltz apparmor at cboltz.de
Thu Jul 28 18:59:00 UTC 2016


Am Donnerstag, 28. Juli 2016, 09:54:09 CEST schrieb John Johansen:
> logprof should be able to decode these, we also have a command line
> utility to do it
> aa-decode
> 2F7573722F6C69622F706C65786D656469617365727665722F506C6578204D6564696
> 1205365727665722F2F6E756C6C2D2F7573722F6C69622F706C65786D6564696173657
> 27665722F506C657820444C4E4120536572766572 Decoded:
> /usr/lib/plexmediaserver/Plex Media
> Server//null-/usr/lib/plexmediaserver/Plex DLNA Server

Let me add that you can also do
    tail -f /var/log/audit/audit.log | aa-decode
and it will decode all lines that need decoding ;-)


Christian Boltz

PS: Non-random sig ;-)
> Erg, I forgot about that.  I think it might be best to fix logprof to
> not create profile files with spaces in the names.
Uh? If someone names their program with a space in it, that's a _sure_
sign that that program needs a profile, IMHO. :)
[> jesse michael and Seth Arnold in apparmor-dev]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160728/cc0c2fc6/attachment.pgp>

More information about the AppArmor mailing list