Hi. This is the intended behavior of logprof/genprof (perhaps as you suggest there could be better intended behavior :)
The way its used is that genprof marks the log with a random string to denote the log section it should be looking at when you "Scan For Events" while generating a new profile. So the tools know to ignore everything before the mark. Its possible that logprof could be modified so that it records the last entry processed (the date or some unique id from the log entry - or even marks the log again and saves the mark). Then on subsequent runs it could start where it left of - so not asking the same questions that you have chosen Deny for. -dom It uses the logger command (defined in /etc/apparmor/logprof.conf) to mark the logs. -- logprof doesn't handle marks (in any usefull way) https://bugs.launchpad.net/bugs/173260 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
