mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-25 19:47:23 +00:00
16 lines
673 B
Perl
16 lines
673 B
Perl
|
require LibAppArmor;
|
||
|
|
|
||
|
|
$msg = "type=APPARMOR msg=audit(1168662182.495:58): PERMITTING r access to /home/matt/projects/change_hat_test/test (test_hat(27871) profile /home/matt/projects/change_hat_test/test_hat active null-complain-profile)";
|
||
|
|
|
||
|
|
my($test) = AppArmorLogRecordParser::parse_record($msg);
|
||
|
|
|
||
|
|
if (AppArmorLogRecordParser::aa_log_record::swig_event_get($test) == $AppArmorLogRecordParser::AA_RECORD_ALLOWED )
|
||
|
|
{
|
||
|
|
print "AA_RECORD_ALLOWED\n";
|
||
|
|
}
|
||
|
|
|
||
|
|
print "Audit ID: " . AppArmorLogRecordParser::aa_log_record::swig_audit_id_get($test) . "\n";
|
||
|
|
print "PID: " . AppArmorLogRecordParser::aa_log_record::swig_pid_get($test) . "\n";
|
||
|
|
|
||
|
|
AppArmorLogRecordParser::free_record($test);
|