thank you. logrotate asks for /usr/sbin/proftpd (x), /var/run/proftpd.pid (i think rwk), /etc/proftpd/** (r), /usr/lib/apache2/mpm-worker/apache2 (x). i have now added apache and proftpd with Px. i hope it did not execute them in complain mode.
why there are these logs at system start?, this is today, other day may be differ :
i have checked with aa-status, not only these profiles are loaded.Code:Aug 4 06:55:58 dinar-desktop kernel: [ 4.908385] type=1505 audit(1280904932.165:2): operation="profile_load" pid=383 name=/bin/netstat Aug 4 06:55:58 dinar-desktop kernel: [ 4.951065] type=1505 audit(1280904932.205:3): operation="profile_load" pid=384 name=/bin/ping Aug 4 06:55:58 dinar-desktop kernel: [ 4.974530] type=1505 audit(1280904932.229:4): operation="profile_load" pid=385 name=/etc/cron.daily/awffull Aug 4 06:55:58 dinar-desktop kernel: [ 5.007439] type=1505 audit(1280904932.261:5): operation="profile_load" pid=386 name=/etc/cron.daily/logrotate Aug 4 06:55:58 dinar-desktop kernel: [ 5.039473] type=1505 audit(1280904932.293:6): operation="profile_load" pid=387 name=/etc/cron.daily/slocate.cron Aug 4 06:55:58 dinar-desktop kernel: [ 5.053068] type=1505 audit(1280904932.309:7): operation="profile_load" pid=388 name=/etc/cron.daily/tmpwatch Aug 4 06:55:58 dinar-desktop kernel: [ 5.082692] type=1505 audit(1280904932.337:8): operation="profile_load" pid=389 name=/etc/init.d/amavis Aug 4 06:55:58 dinar-desktop kernel: [ 5.106370] type=1505 audit(1280904932.361:9): operation="profile_load" pid=390 name=/etc/init.d/clamav-daemon Aug 4 06:55:58 dinar-desktop kernel: [ 5.110278] type=1505 audit(1280904932.365:10): operation="profile_load" pid=391 name=/etc/init.d/clamav-freshclam Aug 4 06:55:58 dinar-desktop kernel: [ 5.748447] __ratelimit: 111 callbacks suppressed Aug 4 06:55:58 dinar-desktop kernel: [ 5.748455] type=1505 audit(1280904933.005:48): operation="profile_load" pid=425 name=/usr/bin/gajim Aug 4 06:55:58 dinar-desktop kernel: [ 5.776960] type=1505 audit(1280904933.033:49): operation="profile_load" pid=426 name=/usr/bin/ghex2 Aug 4 06:55:58 dinar-desktop kernel: [ 5.784703] type=1505 audit(1280904933.041:50): operation="profile_load" pid=427 name=/usr/bin/gimp-2.* Aug 4 06:55:58 dinar-desktop kernel: [ 5.789306] type=1505 audit(1280904933.045:51): operation="profile_load" pid=428 name=/usr/bin/gossip Aug 4 06:55:58 dinar-desktop kernel: [ 5.799475] type=1505 audit(1280904933.053:52): operation="profile_load" pid=429 name=/usr/bin/icecast Aug 4 06:55:58 dinar-desktop kernel: [ 5.811557] type=1505 audit(1280904933.065:53): operation="profile_load" pid=430 name=/usr/bin/icecast2 Aug 4 06:55:58 dinar-desktop kernel: [ 5.829942] type=1505 audit(1280904933.085:54): operation="profile_load" pid=431 name=/usr/bin/ices2 Aug 4 06:55:58 dinar-desktop kernel: [ 5.834723] type=1505 audit(1280904933.089:55): operation="profile_load" pid=432 name=/usr/bin/konqueror Aug 4 06:55:58 dinar-desktop kernel: [ 5.850446] type=1505 audit(1280904933.105:56): operation="profile_load" pid=433 name=/usr/bin/kopete Aug 4 06:55:58 dinar-desktop kernel: [ 5.862958] type=1505 audit(1280904933.117:57): operation="profile_load" pid=434 name=/usr/bin/liveice ... ... Aug 4 06:55:58 dinar-desktop kernel: [ 30.864252] type=1505 audit(1280890558.121:162): operation="profile_replace" pid=1230 name=/bin/netstat Aug 4 06:55:58 dinar-desktop kernel: [ 30.868229] type=1505 audit(1280890558.125:163): operation="profile_replace" pid=1231 name=/bin/ping Aug 4 06:55:58 dinar-desktop kernel: [ 30.872185] type=1505 audit(1280890558.129:164): operation="profile_replace" pid=1232 name=/etc/cron.daily/awffull Aug 4 06:55:58 dinar-desktop kernel: [ 30.945018] type=1505 audit(1280890558.201:165): operation="profile_replace" pid=1233 name=/etc/cron.daily/logrotate Aug 4 06:55:58 dinar-desktop kernel: [ 30.949303] type=1505 audit(1280890558.205:166): operation="profile_replace" pid=1245 name=/etc/cron.daily/slocate.cron Aug 4 06:55:58 dinar-desktop kernel: [ 30.953068] type=1505 audit(1280890558.209:167): operation="profile_replace" pid=1246 name=/etc/cron.daily/tmpwatch Aug 4 06:55:58 dinar-desktop kernel: [ 30.956893] type=1505 audit(1280890558.213:168): operation="profile_replace" pid=1247 name=/etc/init.d/amavis Aug 4 06:55:58 dinar-desktop kernel: [ 30.960764] type=1505 audit(1280890558.217:169): operation="profile_replace" pid=1248 name=/etc/init.d/clamav-daemon Aug 4 06:55:58 dinar-desktop kernel: [ 30.991635] type=1505 audit(1280890558.245:170): operation="profile_replace" pid=1249 name=/etc/init.d/clamav-freshclam Aug 4 06:55:58 dinar-desktop kernel: [ 30.995578] type=1505 audit(1280890558.249:171): operation="profile_replace" pid=1250 name=/etc/init.d/ejabberd
and again ask what is in post #124, what is cache directory ( and why there are such file names and file times).
Bookmarks