fix: do not ignore AVC messages

AppArmor messages are also logged as AVC messages. The current behaviour blocks them all, so no apparmor messages are printed. Change this to allow AVC.
Neo23x0 · May 22, 2024 · 793a373 · 793a373
1 parent 8ba9a83
commit 793a373
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/audit.rules b/audit.rules
@@ -74,9 +74,6 @@
 
 ### We put these early because audit is a first match wins system.
 
-## Ignore SELinux AVC records
--a always,exclude -F msgtype=AVC
-
 ## Ignore current working directory records
 -a always,exclude -F msgtype=CWD