Originally Posted by novadean
|
|
Is there anyway to have apparmor append to syslog in syslog format rather than it's audit format? It would be easier to forward to a SIM device then.
|
I just found out I can have apparmor write to /var/log/messages if auditd is not running - however is there a way to output to /var/log/messages by default regardless if auditd is running or not?
Re: apparmor and syslog
Threaded Mode
