On 12/20/2017 01:19 AM, Christian Boltz wrote: > Hello, > > Am Mittwoch, 20. Dezember 2017, 06:11:26 CET schrieb John Johansen: >> On 12/19/2017 06:56 PM, [email protected] wrote: > >>> It means I need to decode paths in log messages before >>> I can add new rules to make the log messages go away. >> >> unfortunately yes. I need to finish a patch to the log parsing lib >> that will do this transparently, so logprof with just work with >> this. > > Huh? aa-logprof (actually libapparmor) already does the decoding [1], so > unless I'm overlooking something (not yet handled log fields?), there's > probably nothing you need to patch ;-) > iirc there are a couple of cases that need to be fixed.
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
