apparmor/libraries/libapparmor/testsuite/test_multi/testcase13.out

START
File: testcase13.in
Event type: AA_RECORD_DENIED
Audit ID: 1181057184.959:7
Operation: exec
Mask: rwx
Denied Mask: x
Profile: /bin/ping
Name: /bin/ping
Name2: ping2
Attribute: attr
Task: 123456789
Parent: 123456788
Token: 29493
Info: Information
PID: 31938
Network family: family
Socket type: unknown(1234)
Protocol: tcp
Epoch: 1181057184
Audit subid: 7
This patch adds support to the logparsing library for the type=15xx flags when events come through the audit subsystem. It also fixes the case where the audit daemon has not been configured with apparmor support and the events are reported as type=UNKNOWN[15xx]. It also fixes the testsuite dependencies so that they will get relinked when the library changes. 2007-09-14 14:00:48 +00:00			`START`
Subject: libapparmor - don't emit path in testcase output This patch converts the C test program to only emit the basename(3) of the test input file under consideration, rather than the entire path as passed on the command line, and fixes up all the expected outputs to match. The reason to do this is to make it easier for other tools located in other directories (e.g. under libapparmor/swig) to use these same test cases with reduced special casing. Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: Tyler Hicks <tyhicks@canonical.com> 2013-09-06 14:13:56 -07:00			`File: testcase13.in`
This patch adds support to the logparsing library for the type=15xx flags when events come through the audit subsystem. It also fixes the case where the audit daemon has not been configured with apparmor support and the events are reported as type=UNKNOWN[15xx]. It also fixes the testsuite dependencies so that they will get relinked when the library changes. 2007-09-14 14:00:48 +00:00			`Event type: AA_RECORD_DENIED`
			`Audit ID: 1181057184.959:7`
			`Operation: exec`
			`Mask: rwx`
			`Denied Mask: x`
			`Profile: /bin/ping`
			`Name: /bin/ping`
			`Name2: ping2`
			`Attribute: attr`
Fix the logparsing library to parse correctly the task field passed back by apparmor; the new syntax passes back the task as unquoted digits, whereas the logparser expected a quoted string. 2007-09-17 21:54:49 +00:00			`Task: 123456789`
Add correctly generated testcase for parent=pid_t from Kenny Graunke <kgraunke@novell.com>, as well as fixing the code to properly parse messages containing them. Alas, this resulted in a change in the returned structure. 2007-09-17 22:38:22 +00:00			`Parent: 123456788`
This patch adds support to the logparsing library for the type=15xx flags when events come through the audit subsystem. It also fixes the case where the audit daemon has not been configured with apparmor support and the events are reported as type=UNKNOWN[15xx]. It also fixes the testsuite dependencies so that they will get relinked when the library changes. 2007-09-14 14:00:48 +00:00			`Token: 29493`
			`Info: Information`
			`PID: 31938`
			`Network family: family`
			`Socket type: unknown(1234)`
			`Protocol: tcp`
			`Epoch: 1181057184`
			`Audit subid: 7`