[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Apparmor et firefox



Bonjour,

J'ai les logs de mon laptop qui sont littéralement inondés de log d'audit de AppArmor :

Jan 31 17:11:56 localhost kernel: [59183.152653] audit: type=1400 audit(1517415116.082:304130): apparmor="ALLOWED" operation="truncate" profile="/usr/lib/firefox/firefox" name="/home/mourad/.mozilla/firefox/9b0u1yw2.default-1471953771209/storage/default/https+++web.whatsapp.com/cache/caches.sqlite" pid=29417 comm="DOMCacheThread" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000 Jan 31 17:11:56 localhost kernel: [59183.154207] audit: type=1400 audit(1517415116.086:304131): apparmor="ALLOWED" operation="unlink" profile="/usr/lib/firefox/firefox" name="/home/mourad/.mozilla/firefox/9b0u1yw2.default-1471953771209/storage/default/https+++web.whatsapp.com/cache/caches.sqlite-shm" pid=29417 comm="DOMCacheThread" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000 Jan 31 17:11:56 localhost kernel: [59183.154355] audit: type=1400 audit(1517415116.086:304132): apparmor="ALLOWED" operation="unlink" profile="/usr/lib/firefox/firefox" name="/home/mourad/.mozilla/firefox/9b0u1yw2.default-1471953771209/storage/default/https+++web.whatsapp.com/cache/caches.sqlite-wal" pid=29417 comm="DOMCacheThread" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000 Jan 31 17:11:56 localhost kernel: [59183.154761] audit: type=1400 audit(1517415116.086:304133): apparmor="ALLOWED" operation="unlink" profile="/usr/lib/firefox/firefox" name="/home/mourad/.mozilla/firefox/9b0u1yw2.default-1471953771209/storage/default/https+++web.whatsapp.com/cache/context_open.marker" pid=29417 comm=4950444C204261636B67726F756E64 requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000 Jan 31 17:12:11 localhost kernel: [59198.217175] audit: type=1400 audit(1517415131.150:304134): apparmor="ALLOWED" operation="open" profile="/usr/lib/firefox/firefox" name="/etc/hosts" pid=29417 comm=444E53205265737E76657220233137 requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

Y'a-t-il une possibilité de supprimer ce "flooding" ?

++

Mourad


Reply to: