apparmor/libraries/libapparmor/testsuite/test_multi/symlink.out

START
File: symlink.in
Event type: AA_RECORD_DENIED
Audit ID: 1596384041.705:290
Operation: symlink
Mask: c
Denied Mask: c
fsuid: 0
ouid: 0
Profile: /home/test.sh
Name: /home/b.c
Command: ln
PID: 8016
Epoch: 1596384041
Audit subid: 290
Handle `symlink` log events in aa-logprof Nobody told the tools that log events with operation="symlink" exist. Add this keyword to the list of file or network operations (I don't expect network symlinks ;-) but keeping everything in that list makes things easier than special-casing it.) Also add the log sample and expected result to the libapparmor tests. Fixes https://gitlab.com/apparmor/apparmor/-/issues/107 2020-08-02 19:49:18 +02:00			`START`
			`File: symlink.in`
			`Event type: AA_RECORD_DENIED`
			`Audit ID: 1596384041.705:290`
			`Operation: symlink`
			`Mask: c`
			`Denied Mask: c`
			`fsuid: 0`
			`ouid: 0`
			`Profile: /home/test.sh`
			`Name: /home/b.c`
			`Command: ln`
			`PID: 8016`
			`Epoch: 1596384041`
			`Audit subid: 290`