[Apparmor-general] What does this audit log entry mean?

[Peter Poeml]

Hi John,

On Sun, Feb 01, 2009 at 10:49:47PM -0800, John Johansen wrote:
> > type=APPARMOR_ALLOWED msg=audit(1233365168.452:270): 
> > operation="inode_permission" info="Failed name resolution - object not 
> > a valid entry" error=-2 requested_mask="w::" denied_mask="w::" fsuid=30 
> > pid=31893 profile="/usr/sbin/httpd2-prefork//vhost_foobar"
[...]
> These messages can occur when there is an access attempt to an open file
> object that no longer exists in the namespace.  This basically means
> that the file doesn't have a valid name anymore so AppArmor can't
> compute its name to determine access permissions.
[...]

Thank you for the nice explanation!

Peter
-- 
Contact: admin at opensuse.org (a.k.a. ftpadmin at suse.com)
         #opensuse-mirrors on freenode.net
Info: http://en.opensuse.org/Mirror_Infrastructure
 
SUSE LINUX Products GmbH
Research & Development