Package: python3-apparmor
Version: 2.9.0-3

Hi,

aa-genprof worked fine in Debian 7 but it doesn't anymore in Jessie. It
starts fine but when done with the test scenario to generate a profile
and hitting 'S' to scan for events, it doesn't find any event in the
syslog even though there are a lot of them (grepping for audit returns a
lot of lines) and I can see with aa-status that AppArmor is enabled.

Digging through the bug reports, I found the solution on the Ubuntu
Launchpad: https://bugs.launchpad.net/apparmor/+bug/1399027/comments/9
and basically, the solution is to edit the value of RE_LOG_v2_6_syslog
(in class ReadLog) in
/usr/lib/python3/dist-packages/apparmor/logparser.py and add
(audit:\s+)? right before 'type' in the regular expression.

Another possibility is to install auditd. If this option is chosen,
documentation at
https://wiki.debian.org/AppArmor/HowToUse#Install_software needs to be
updated to include the installation of that package.

It's pretty similar (if not equivalent) to bug 771400
(https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771400) but in this
case, it's not sid (which means I'm using the default apt configuration
from a netinstall).

Best regards,

Thomas d'Otreppe de Bouvette

CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for 
the sole use of the intended recipient(s) and may contain proprietary 
information. Any unauthorized review, use, disclosure or distribution is 
prohibited. If you are NOT the intended recipient, please contact the sender by 
reply e-mail and destroy all copies of the original message.


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to