Is it just me, or is there a reason for it?

[C de-Avillez]

On Thu, 12 Aug 2010 17:54:28 +0100
R Kimber <richardkimber at btinternet.com> wrote:

> The level of logging seems to me to be far in excess of what the
> ordinary user needs.  I can understand that a developer might need:-

<snip/>

> Maybe someone, somewhere, needs:-

<snip/>

> Aug 11 15:23:09 infinity kernel: [535510.617659] type=1503
> audit(1281536589.896:95):  operation="open" pid=12141 parent=1
> profile="/usr/bin/evince" requested_mask="r::" denied_mask="r::"
> fsuid=1000 ouid=1000 name="/media/zip/rwanda.doc"

This one is quite interesting: it is telling you (or, at least, me)
that someone tried to open for read '/media/zip/rwanda.doc', but
apparmour blocked it. If this is a problem *now* or not depends if
apparmour was set to enforce (or just "complain") blocks. In Maverick
I know it is in enforce mode for evince.

<snip/>

> Do we get these sorts of messages because some debug option hasn't
> been turned off when apps have been compiled (i.e. could package
> maintainers be persuaded to be more careful in this respect), or is
> there a good (user-level) reason for them?

You already have a very good reason here -- at least for this message.

Additionally, if you do not want more logging, you can tweak it
on /etc/rsyslog.d and /etc/rsyslog.conf, even routing messages
to /dev/null, the bitbucket.

But I, as both sysadmin and user, would rather have more loggkng than
less.

-- 
C de-Avillez
IRC: hggdh

This email (and any attachments) is digitally signed using GNUpg
(http://gnupg.org). The public key is available at http://pgp.mit.edu.
The key Id is 0xD3133E56.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20100812/fff08d78/attachment.sig>