Verify on jammy: PASS
=====================
2.77.1+ubuntu22.04.1 from jammy-proposed
snap version --verbose
snap 2.77.1+ubuntu22.04.1
snapd 2.77.1+ubuntu22.04.1
series 16
ubuntu 22.04
kernel 5.15.0-198-generic
architecture amd64
snapd-bin-from native-package
snap-bin-from native-package
auditd was masked so journald owns the audit netlink:
sudo systemctl mask auditd.service
sudo systemctl stop systemd-journald.service
sudo systemctl start systemd-journald-audit.socket
sudo systemctl start systemd-journald.service
sudo /usr/sbin/auditctl -e 1
systemctl is-active systemd-journald-audit.socket
active
sudo systemctl restart snapd.service
journalctl -b0 _TRANSPORT=audit -o json | grep -F 'Security logging'
MESSAGE=TRUSTED_APP pid=3839 uid=0 auid=4294967295 ses=4294967295
subj=unconfined
msg='{"datetime":"2026-10-22T15:36:33.210115474Z","level":"INFO","description":"Security
logging
enabled","app_id":"canonical.snapd.snapd","type":"security","category":"SYS","event":"sys_logging_enabled"}'
INNER_TAIL_REPR='ng_enabled"}' <==== NO NEWLINE
Both "Security logging enabled" records parse as JSON. The inner object
parses as JSON and does not contain a newline. 297 audit JSON lines, 0
invalid.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2160691
Title:
snapd outputs newline after json log
To manage notifications about this bug go to:
https://bugs.launchpad.net/snapd/+bug/2160691/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
