[apparmor] logs with name="not an absolute path" or name=HEXSTRING

Christian Boltz apparmor at cboltz.de
Wed Dec 20 09:19:38 UTC 2017


Hello,

Am Mittwoch, 20. Dezember 2017, 06:11:26 CET schrieb John Johansen:
> On 12/19/2017 06:56 PM, apparmor at raf.org wrote:

> > It means I need to decode paths in log messages before
> > I can add new rules to make the log messages go away.
> 
> unfortunately yes. I need to finish a patch to the log parsing lib
> that will do this transparently, so logprof with just work with
> this.

Huh? aa-logprof (actually libapparmor) already does the decoding [1], so 
unless I'm overlooking something (not yet handled log fields?), there's 
probably nothing you need to patch ;-)


Regards,

Christian Boltz

[1] see for example libapparmor test_multi/testcase22.*
-- 
Warum deine Programme auf spanisch ausgeführt werden kommt mir sehr
spanisch vor (*kloink* *Centstücke in die schlechte Wortspielkasse
schmeiß*). [Michael Skiba in opensuse-de]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20171220/54ab6c05/attachment.sig>


More information about the AppArmor mailing list