From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH] userspace: audit: ausearch doesn't return entries for AppArmor events that exist in the log Date: Fri, 29 Apr 2016 12:30:15 -0400 Message-ID: <2439154.9hzZSnzZKD@x2> References: <20888678.3grpTmsTEK@x2> <572386AA.4030903@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <572386AA.4030903@gmail.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com T24gRnJpZGF5LCBBcHJpbCAyOSwgMjAxNiAwNzowNzowNiBQTSBWaW5jYXMgRGFyZ2lzIHdyb3Rl Ogo+IDIwMTYuMDQuMjkgMTY6MzksIFN0ZXZlIEdydWJiIHJhxaHElzoKPiA+IFlvdSdsbCBoYXZl IHRvIGFzayB0aGUgQXBwQXJtb3IgZm9sa3MuIEkgZ2F2ZSB0aGVtIGEgd2hvbGUgYmxvY2sgb2YK PiA+IG51bWJlcnMgdG8gdXNlIGZvciB0aGVpciBvd24gcHVycG9zZXMgc28gdGhhdCB3ZSBkb24n dCBoYXZlIGFueSBwcm9ibGVtcy4KPiA+IElmIHRoZXkgaW5zdGVhZCBjcmVhdGUgbWFsZm9ybWVk IFNFIExpbnV4IGV2ZW50cywgdGhlbiB0aGluZ3Mgd2lsbCBuZXZlcgo+ID4gd29yayByaWdodCB1 bmxlc3MgdGhleSBwYXRjaCB0aGVtLgo+IAo+IFRoYW5rIHlvdSBmb3IgZXhwbGFuYXRpb24sIFN0 ZXZlLiBJJ2xsIGJyaW5nIHRoaXMgdG9waWMgZm9yIHRoZW0gaW5zdGVhZC4KCkp1c3QgdG8gY2xh cmlmeSwgaXRzIG5vdCBsaWtlIEkgZG9uJ3Qgd2FudCB0aGlzIHRvIHdvcmsuIEkgZG8uIFRoZSBp bnRlbnRpb24gCm9mIGdpdmluZyBhcHAgYXJtb3IgaXRzIG93biBibG9jayB3YXMgdGhhdCB0aGlu Z3MgaXRzIGRvaW5nIG1pZ2h0IG5vdCBiZSBhIAoxMDAlIGZpdCBmb3Igd2hhdCBTRSBMaW51eCBk b2VzLiBUaGlzIHdhcyB0byBnaXZlIHRoZW0gdGhlIGZyZWVkb20gdG8gZG8gdGhlaXIgCm93biB0 aGluZy4gSWYgdGhleSBjaG9zZSBub3QgdG8gdXNlIHRoZSBibG9jayBhbmQgaW5zdGVhZCB0cnkg dG8gc2hvZS1ob3JuIAp0aGVpciBldmVudHMgaW50byBhIHByZS1leGlzdGluZyBvbmUsIHRoZXJl IG5lZWRzIHRvIGJlIHNvbWUgZGlzY3Vzc2lvbiBhYm91dCAKaG93IHRvIG1ha2UgdGhpbmdzIHJp Z2h0LgoKLVN0ZXZlCgotLQpMaW51eC1hdWRpdCBtYWlsaW5nIGxpc3QKTGludXgtYXVkaXRAcmVk aGF0LmNvbQpodHRwczovL3d3dy5yZWRoYXQuY29tL21haWxtYW4vbGlzdGluZm8vbGludXgtYXVk aXQ=