Bug 127889

Summary: AppArmor's subdomain module doesn't log profile loads, reloads, or unloads
Product: [openSUSE] SUSE LINUX 10.0 Reporter: Seth R Arnold <seth.arnold>
Component: AppArmorAssignee: Michal Svec <msvec>
Status: RESOLVED WONTFIX QA Contact: Michal Svec <msvec>
Severity: Enhancement    
Priority: P5 - None    
Version: Beta 3   
Target Milestone: ---   
Hardware: Other   
OS: All   
Whiteboard:
Found By: Development Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Seth R Arnold 2005-10-12 17:28:01 UTC
AppArmor's subdomain module doesn't log profile loads, reloads, or unloads; the
only notification currently available is when _all_ profiles are reloaded using
the initscript, because it will print something like this:
SubDomain: Control variable 'owlsm' changed to 0
Of course, this is also triggerable via other mechanisms, so it should not be
relied upon to determine when profiles are added, removed, or changed.
Comment 1 Seth R Arnold 2006-02-07 23:07:52 UTC
The SubDomain: Control variable warning should no longer be triggered, making policy load undetectable.
Comment 5 John R Johansen 2007-11-16 00:04:33 UTC
This feature will not be added to SL10 but has been added to the code base SL10.4/SLES 11