apparmor.d/docs/report.md

title
Report AppArmor logs

The aa-log tool reports all AppArmor DENIED and ALLOWED. It should be used to fix AppArmor related issues.

While testing, if something get wrong, you need to put the profile in complain mode, so that you can investigate, and it does not block your program.

When creating an issue on Github, please post a link to the paste of the audit log generated with:

aa-log -R

If this command produce nothing, try:

aa-log -s -R

You can get more logs with:

1. aa-log -R -s that will provide all apparmor logs since boot time (if journalctl collect them)
2. aa-log -R -f <nb> where <nb> is 1, 2, 3 and 4 (the rotated audit log file)