AppArmor

unix socket rules not detected by aa-logprof 2.9.1

Bug #1437634 reported by BytePhunk
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
AppArmor
New
Undecided
Unassigned

Bug Description

Socket related events are ignored by aa-logprof ad aa-genprof . Version 2.9.1

type=AVC msg=audit(1427552460.461:29320): apparmor="DENIED" operation="bind" profile="/usr/bin/wineserver" pid=24402 comm="wineserver" family="unix" sock_type="stream" protocol=0 requested_mask="bind" denied_mask="bind" addr="socket"

bind,connect etc. all seem to be ignored by the log parser.

Tags: aa-tools
Revision history for this message
Christian Boltz (cboltz) wrote :

That's a known missing feature - the tools don't have support for unix rules (and some other rule types) yet.

tags: added: aa-tools
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.