apparmor/libraries/libapparmor/testsuite/test_multi/testcase01.out

START
File: testcase01.in
Event type: AA_RECORD_DENIED
Audit ID: 1181057184.959:7
Operation: exec
Mask: rwx
Denied Mask: x
Profile: /bin/ping
Name: /bin/ping
Name2: ping2
Attribute: attr
Task: 1
Parent: 1
Token: 29493
Info: Information
PID: 31938
Network family: family
Socket type: unknown(1234)
Protocol: tcp
Epoch: 1181057184
Audit subid: 7
- Merged the library previously known as "libaalogparse" with libapparmor. - Moved the old libapparmor library to libapparmor-deprecated. 2007-07-28 15:41:04 +00:00			`START`
Subject: libapparmor - don't emit path in testcase output This patch converts the C test program to only emit the basename(3) of the test input file under consideration, rather than the entire path as passed on the command line, and fixes up all the expected outputs to match. The reason to do this is to make it easier for other tools located in other directories (e.g. under libapparmor/swig) to use these same test cases with reduced special casing. Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: Tyler Hicks <tyhicks@canonical.com> 2013-09-06 14:13:56 -07:00			`File: testcase01.in`
- Merged the library previously known as "libaalogparse" with libapparmor. - Moved the old libapparmor library to libapparmor-deprecated. 2007-07-28 15:41:04 +00:00			`Event type: AA_RECORD_DENIED`
			`Audit ID: 1181057184.959:7`
			`Operation: exec`
			`Mask: rwx`
			`Denied Mask: x`
			`Profile: /bin/ping`
			`Name: /bin/ping`
			`Name2: ping2`
			`Attribute: attr`
Fix the logparsing library to parse correctly the task field passed back by apparmor; the new syntax passes back the task as unquoted digits, whereas the logparser expected a quoted string. 2007-09-17 21:54:49 +00:00			`Task: 1`
Add correctly generated testcase for parent=pid_t from Kenny Graunke <kgraunke@novell.com>, as well as fixing the code to properly parse messages containing them. Alas, this resulted in a change in the returned structure. 2007-09-17 22:38:22 +00:00			`Parent: 1`
- Was previously under the belief that pid="1234" and magic_token="1245353" were correct syntax from the kernel. It turns out this is not the case. 2007-08-05 22:54:41 +00:00			`Token: 29493`
- Merged the library previously known as "libaalogparse" with libapparmor. - Moved the old libapparmor library to libapparmor-deprecated. 2007-07-28 15:41:04 +00:00			`Info: Information`
			`PID: 31938`
- Added "protocol", "family" and "sock_type" to the parser to support the initial network support. 2007-08-06 02:38:30 +00:00			`Network family: family`
			`Socket type: unknown(1234)`
			`Protocol: tcp`
- Added the timestamp from the audit ID ('epoch') to aa_log_record. - Added the integer that follows the colon in the audit ID ('audit_sub_id') to aa_log_record. - Modified the testsuite to deal with the two new numbers. 2007-08-15 20:07:48 +00:00			`Epoch: 1181057184`
			`Audit subid: 7`