On Fri, May 25, 2007 at 10:31:14PM -0000, Kees Cook wrote:
> Additionally, to get AppArmor into main, we will need to get libdbd-
> sqlite3-perl and libfile-tail-perl into main as well, or find a way
> around needing them.

aa-eventd scans log files with File::Tail, catches audit messages generated
by AppArmor and dumps them into a sqlite database. The database is then used
by reporting tools (through Reports.pm, currently only Yast is using it).
The reason to use sqlite is for speed : scanning through log files
every time one wants to get information about policy violation is much 
slower (according to sarnold).

Additionaly aa-eventd can send notification via email.

-- 
aa-eventd dependencies missing (from apparmor-utils)
https://bugs.launchpad.net/bugs/116921
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to