Hi, I use an apparmor profile for rsyslogd, and recently became aware then when an event like one triggered by this logger command:
logger -p user.emerg --tag check-journal EMERGENCY_MESSAGE Will have rsyslogd (possibly via libsystemd?) try to read /run/systemd/sessions/ and files therein. Even though that read is denied by apparmor, I see the log message in my terminal, and in the logs on disk as expected. Does anybody know why it's reading those session files? Maybe to get a list of TTYs in use in the system? _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
