From 9c0f4dd6a747721c756052ff93eeb31355317d25 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Fri, 3 May 2024 12:34:08 +0100 Subject: [PATCH] fix(aa-log): grep journal logs over apparmor instead of AVC for wider compatibility. --- pkg/logs/loggers.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/logs/loggers.go b/pkg/logs/loggers.go index a46471aca..517f038af 100644 --- a/pkg/logs/loggers.go +++ b/pkg/logs/loggers.go @@ -75,8 +75,8 @@ func GetJournalctlLogs(path string, useFile bool) (io.Reader, error) { } scanner = bufio.NewScanner(file) } else { - // journalctl -b -o json --grep=AVC --output-fields=MESSAGE > systemd.log - cmd := exec.Command("journalctl", "--boot", "--grep=AVC", "--output=json", "--output-fields=MESSAGE") + // journalctl -b -o json --grep=apparmor --output-fields=MESSAGE > systemd.log + cmd := exec.Command("journalctl", "--boot", "--grep=apparmor", "--output=json", "--output-fields=MESSAGE") cmd.Stdout = &stdout if err := cmd.Run(); err != nil { return nil, err