Bugzilla – Bug 127889
AppArmor's subdomain module doesn't log profile loads, reloads, or unloads
Last modified: 2007-11-16 00:04:33 UTC
AppArmor's subdomain module doesn't log profile loads, reloads, or unloads; the only notification currently available is when _all_ profiles are reloaded using the initscript, because it will print something like this: SubDomain: Control variable 'owlsm' changed to 0 Of course, this is also triggerable via other mechanisms, so it should not be relied upon to determine when profiles are added, removed, or changed.
The SubDomain: Control variable warning should no longer be triggered, making policy load undetectable.
This feature will not be added to SL10 but has been added to the code base SL10.4/SLES 11