mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 22:05:27 +00:00
Code Issues Releases Wiki Activity
Files
7489640b82182cbeff7f7022ff077d0691eb2b8f
apparmor/changehat/libapparmor/testsuite/test_multi/testcase1.out

22 lines
362 B
Plaintext
Raw Normal View History

- Merged the library previously known as "libaalogparse" with libapparmor. - Moved the old libapparmor library to libapparmor-deprecated.
2007-07-28 15:41:04 +00:00
START
File: test_multi/testcase1.in
Event type: AA_RECORD_DENIED
Audit ID: 1181057184.959:7
Operation: exec
Mask: rwx
Denied Mask: x
Profile: /bin/ping
Name: /bin/ping
Name2: ping2
Attribute: attr
Fix the logparsing library to parse correctly the task field passed back by apparmor; the new syntax passes back the task as unquoted digits, whereas the logparser expected a quoted string.
2007-09-17 21:54:49 +00:00
Task: 1
- Merged the library previously known as "libaalogparse" with libapparmor. - Moved the old libapparmor library to libapparmor-deprecated.
2007-07-28 15:41:04 +00:00
Parent: something
- Was previously under the belief that pid="1234" and magic_token="1245353" were correct syntax from the kernel. It turns out this is not the case.
2007-08-05 22:54:41 +00:00
Token: 29493
- Merged the library previously known as "libaalogparse" with libapparmor. - Moved the old libapparmor library to libapparmor-deprecated.
2007-07-28 15:41:04 +00:00
Info: Information
PID: 31938
- Added "protocol", "family" and "sock_type" to the parser to support the initial network support.
2007-08-06 02:38:30 +00:00
Network family: family
Socket type: unknown(1234)
Protocol: tcp
- Added the timestamp from the audit ID ('epoch') to aa_log_record. - Added the integer that follows the colon in the audit ID ('audit_sub_id') to aa_log_record. - Modified the testsuite to deal with the two new numbers.
2007-08-15 20:07:48 +00:00
Epoch: 1181057184
Audit subid: 7
Reference in New Issue Copy Permalink