[apparmor] logs with name="not an absolute path" or name=HEXSTRING
Christian Boltz
apparmor at cboltz.de
Wed Dec 20 09:19:38 UTC 2017
Hello,
Am Mittwoch, 20. Dezember 2017, 06:11:26 CET schrieb John Johansen:
> On 12/19/2017 06:56 PM, apparmor at raf.org wrote:
> > It means I need to decode paths in log messages before
> > I can add new rules to make the log messages go away.
>
> unfortunately yes. I need to finish a patch to the log parsing lib
> that will do this transparently, so logprof with just work with
> this.
Huh? aa-logprof (actually libapparmor) already does the decoding [1], so
unless I'm overlooking something (not yet handled log fields?), there's
probably nothing you need to patch ;-)
Regards,
Christian Boltz
[1] see for example libapparmor test_multi/testcase22.*
--
Warum deine Programme auf spanisch ausgeführt werden kommt mir sehr
spanisch vor (*kloink* *Centstücke in die schlechte Wortspielkasse
schmeiß*). [Michael Skiba in opensuse-de]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20171220/54ab6c05/attachment.sig>
More information about the AppArmor
mailing list