mir/apparmor - apparmor - Mike's Git repositories

mir/apparmor

mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 18:17:09 +00:00

2 lines

256 B

Plaintext

Raw Permalink Normal View History

add log testcases for exec with and without target= - in complain mode, exec events include target=... - in enforce mode, the log message doesn't include target=... Note that the utils tests skip exec events (they'd be interactive), therefore exec*.profile doesn't contain an exec rule.

2019-07-27 22:23:15 +02:00

type=AVC msg=audit(1556742889.059:3686): apparmor="ALLOWED" operation="exec" profile="/home/cb/bin/hello.sh" name="/usr/bin/rm" pid=13108 comm="hello.sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/home/cb/bin/hello.sh//null-/usr/bin/rm"