Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #58726

Bug#872726: linux: apparmor doesn't use proper audit event ids

From Vincas Dargis <vindrg@gmail.com>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#872726: linux: apparmor doesn't use proper audit event ids
Date 2017-08-20 19:10 +0200
Message-ID <ugBTA-1l1-7@gated-at.bofh.it> (permalink)
References <ugzRL-8iD-7@gated-at.bofh.it> <ugzRL-8iD-7@gated-at.bofh.it> <ugzRL-8iD-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


On Sun, 20 Aug 2017 16:42:55 +0200 Laurent Bigonville <bigon@debian.org> wrote:
> IMVHO, in regard to the recent proposal of enabling apparmor in debian
> by default, this needs to be addressed first.

Yes this is very important, although we have aa-logprof to be used as auditing
tool, but I agree that not seeing AppArmor events in your custom auditd report
is rather bad.

We could ask John Johansen if he has it on it's queue. He is upstreaming Ubuntu
patches to mainline Linux, so I guess we depend on his work entirely.

Back to linux.debian.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#872726: linux: apparmor doesn't use proper audit event ids Laurent Bigonville <bigon@debian.org> - 2017-08-20 17:00 +0200
  Bug#872726: linux: apparmor doesn't use proper audit event ids Vincas Dargis <vindrg@gmail.com> - 2017-08-20 19:10 +0200
  Bug#872726: linux: apparmor doesn't use proper audit event ids Vincas Dargis <vindrg@gmail.com> - 2017-08-20 19:10 +0200
  Bug#872726: linux: apparmor doesn't use proper audit event ids intrigeri <intrigeri@debian.org> - 2017-09-03 13:10 +0200
    Bug#872726: linux: apparmor doesn't use proper audit event ids Laurent Bigonville <bigon@debian.org> - 2017-09-04 14:40 +0200
      Bug#872726: linux: apparmor doesn't use proper audit event ids intrigeri <intrigeri@debian.org> - 2017-09-09 19:30 +0200
        Bug#872726: linux: apparmor doesn't use proper audit event ids John Johansen <john.johansen@canonical.com> - 2017-09-09 22:20 +0200

csiph-web