diff --git a/cmd/aa-log/main.go b/cmd/aa-log/main.go index b387c9d7..aa47d9c0 100644 --- a/cmd/aa-log/main.go +++ b/cmd/aa-log/main.go @@ -89,7 +89,7 @@ func NewApparmorLogs(file io.Reader, profile string) AppArmorLogs { log := "" exp := "apparmor=(\"DENIED\"|\"ALLOWED\"|\"AUDIT\")" if profile != "" { - exp = fmt.Sprintf(exp+".* profile=\"%s.*\"", profile) + exp = fmt.Sprintf(exp+".* (profile=\"%s.*\"|label=\"%s.*\")", profile, profile) } isAppArmorLog := regexp.MustCompile(exp)