Understanding Apparmor and Auditd

[espressobeanie]

I'm noticing that both Apparmor and Auditd use the /var/log/audit/audit.log file to write violations to and I'm trying to see if this is intentional and whether these two programs have some relation to one another given their default log file location.

[joegry]

This is intentional as explained in the apparmor man page. Checkout the section under the heading ERRORS http://manpages.ubuntu.com/manpages/...pparmor.7.html