Hi,
wonder why this bugreport wasn't closed. After merging debian upstream:
https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1102414
an watch for the apparmor events was added to logwatch.
** Bug watch added: Debian Bug tracker #649197
** Changed in: logwatch (Debian)
Status: Unknown = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to logwatch in Ubuntu.
https://bugs.launchpad.net/bugs/485873
Title:
logwatch should report apparmor events
To
This unfortunately doesn't work by default in ubuntu because the setting
for audit.conf in /usr/share/logwatch/services/ points to the 'messages'
logfile which is no longer used in ubuntu. It should either be 'syslog'
or 'kernel'.
A secondary issue is that if auditd is enabled, events will only
