AppArmor is auditing the apparmor/.null file
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| apparmor (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
AppArmor is creating unnecessary log spam
Files with a dentry pointing aa_null.dentry where already rejected as
part of file_inheritance. Unfortunately the check in
common_file_perm() is insufficient to cover all cases causing
unnecessary audit messages without the original files context.
Eg.
[ 442.886474] audit: type=1400 audit(170482266
other examples can be found in the logs of
https:/
https:/
https:/
