apparmor/libraries/libapparmor/testsuite/test_multi/testcase15.out

START
File: testcase15.in
Event type: AA_RECORD_DENIED
Audit ID: 1189201672.746:537
Operation: file_lock
Mask: k
Denied Mask: k
Profile: /usr/sbin/nmbd
Name: /var/run/samba/unexpected.tdb
PID: 4316
Epoch: 1189201672
Audit subid: 537
This patch adds support for parsing apparmor messages that come through syslog, along with testcases. This should work for both old and new style log messages, as well as with dmesg timestamps enabled in the kernel ("echo 1 > /sys/module/printk/parameters/printk_time"). This patch applies on top of the previous patch sent to support the type=15xx messages. 2007-09-14 14:26:21 +00:00			`START`
Subject: libapparmor - don't emit path in testcase output This patch converts the C test program to only emit the basename(3) of the test input file under consideration, rather than the entire path as passed on the command line, and fixes up all the expected outputs to match. The reason to do this is to make it easier for other tools located in other directories (e.g. under libapparmor/swig) to use these same test cases with reduced special casing. Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: Tyler Hicks <tyhicks@canonical.com> 2013-09-06 14:13:56 -07:00			`File: testcase15.in`
This patch adds support for parsing apparmor messages that come through syslog, along with testcases. This should work for both old and new style log messages, as well as with dmesg timestamps enabled in the kernel ("echo 1 > /sys/module/printk/parameters/printk_time"). This patch applies on top of the previous patch sent to support the type=15xx messages. 2007-09-14 14:26:21 +00:00			`Event type: AA_RECORD_DENIED`
			`Audit ID: 1189201672.746:537`
			`Operation: file_lock`
			`Mask: k`
			`Denied Mask: k`
			`Profile: /usr/sbin/nmbd`
			`Name: /var/run/samba/unexpected.tdb`
			`PID: 4316`
			`Epoch: 1189201672`
			`Audit subid: 537`