'AppArmor audit log location

Trying to debug with apparmor rules from audit logs. In my workstation(Ubuntu 20), using dmesg gets audit DENIED/ALLOWED logs.

 audit: type=1400 audit(1645465219.195:1219484): apparmor="ALLOWED" operation="unlink" profile="xxx"

But where is theses logs store? In /var/log/audit/audit.log didn't have these detail logs. Need to know these logs location for aa-logprof use.

ubuntuauditapparmor


Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source

Related Questions