apparmor/libraries/libapparmor
John Johansen c37586cd11 Merge Avoid aa-notify crash on log events without operation=
Some STATUS log events trigger a crash in aa-notify because the log
line doesn't have operation=. Examples are:

    type=AVC msg=audit(1630913351.586:4): apparmor="STATUS" info="AppArmor Filesystem Enabled" pid=1 comm="swapper/0"

    type=AVC msg=audit(1630913352.610:6): apparmor="STATUS" info="AppArmor sha1 policy hashing enabled" pid=1 comm="swapper/0"

Fix this by not looking at log events without operation=

Also add one of the example events as libapparmor testcase.

Fixes: https://gitlab.com/apparmor/apparmor/-/issues/194
MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/797
Acked-by: John Johansen <john.johansen@canonical.com>
2021-09-13 23:02:15 +00:00
..
doc [4/7] libapparmor: fix available and enabled checks 2021-07-21 14:31:44 -07:00
include libapparmor: add missing include for socklen_t 2020-10-03 20:42:51 +02:00
m4 look up python-config using AC_PATH_TOOL 2021-03-20 09:42:16 +00:00
src libapparmor: fix log parsing for socklogd 2021-09-13 15:04:06 -07:00
swig Honor global LDFLAGS when building python library 2020-12-08 10:28:53 +01:00
testsuite Merge Avoid aa-notify crash on log events without operation= 2021-09-13 23:02:15 +00:00
AUTHORS libraries/libapparmor/: more license cleanups, adjust my email address 2011-02-23 14:02:45 -08:00
autogen.sh libapparmor: Force libtoolize to replace existing files 2016-09-14 12:48:58 -05:00
ChangeLog move libapparmor into the libraries directory 2008-05-19 22:48:31 +00:00
configure.ac Do not abuse AC_CHECK_FILE 2021-03-20 05:41:48 +00:00
COPYING.LGPL move libapparmor into the libraries directory 2008-05-19 22:48:31 +00:00
INSTALL move libapparmor into the libraries directory 2008-05-19 22:48:31 +00:00
Makefile.am libapparmor: more Makefile cleanups 2015-01-26 15:39:10 -08:00
NEWS move libapparmor into the libraries directory 2008-05-19 22:48:31 +00:00
README docs: update documentation to point bug reporting to gitlab 2020-05-05 00:10:53 -07:00

What little documentation exists is in include/aalogparse.h.

Please file bugs using https://gitlab.com/apparmor/apparmor/-/issues