Ubuntu
apparmor package

add aa-eventd to apparmor-utils

Bug #116921 reported by Mathias Gug
4
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Won't Fix
Wishlist
Unassigned

Bug Description

Binary package hint: apparmor

The aa-eventd perl daemon needs the following packages to work :
 * libtimedate-perl
 * libdbd-sqlite3-perl
 * libfile-tail-perl
 * liblocale-gettext-perl

Revision history for this message
Kees Cook (kees) wrote :

Additionally, to get AppArmor into main, we will need to get libdbd-sqlite3-perl and libfile-tail-perl into main as well, or find a way around needing them.

Changed in apparmor:
importance: Undecided → Medium
status: Unconfirmed → Confirmed
Revision history for this message
Mathias Gug (mathiaz) wrote : Re: [Bug 116921] aa-eventd dependencies missing (from apparmor-utils)

On Fri, May 25, 2007 at 10:31:14PM -0000, Kees Cook wrote:
> Additionally, to get AppArmor into main, we will need to get libdbd-
> sqlite3-perl and libfile-tail-perl into main as well, or find a way
> around needing them.

aa-eventd scans log files with File::Tail, catches audit messages generated
by AppArmor and dumps them into a sqlite database. The database is then used
by reporting tools (through Reports.pm, currently only Yast is using it).
The reason to use sqlite is for speed : scanning through log files
every time one wants to get information about policy violation is much
slower (according to sarnold).

Additionaly aa-eventd can send notification via email.

Mathias Gug (mathiaz)
Changed in apparmor:
importance: Medium → Low
Revision history for this message
Kees Cook (kees) wrote : Re: aa-eventd dependencies missing (from apparmor-utils)

aa-eventd is currently not included in the apparmor-utils package.

Changed in apparmor:
importance: Low → Wishlist
Jamie Strandboge (jdstrand)
summary: - aa-eventd dependencies missing (from apparmor-utils)
+ add aa-eventd to apparmor-utils
Changed in apparmor (Ubuntu):
status: Confirmed → Triaged
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

After discussions at UDS Lucid, it was discovered that aa-eventd is not suitable for shipping at this time. It needs a lot of work and there should be better ways of notifying the user. Marking "Won't Fix".

Changed in apparmor (Ubuntu):
status: Triaged → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.