mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 01:57:43 +00:00
dc3d11bf0a
- in complain mode, exec events include target=... - in enforce mode, the log message doesn't include target=... Note that the utils tests skip exec events (they'd be interactive), therefore exec*.profile doesn't contain an exec rule.
2 lines
256 B
Plaintext
2 lines
256 B
Plaintext
type=AVC msg=audit(1556742889.059:3686): apparmor="ALLOWED" operation="exec" profile="/home/cb/bin/hello.sh" name="/usr/bin/rm" pid=13108 comm="hello.sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/home/cb/bin/hello.sh//null-/usr/bin/rm"
|