#992771 please improve support for apparmor

Package:
strongswan-charon
Source:
strongswan
Description:
strongSwan Internet Key Exchange daemon
Submitter:
Harald Dunkel
Date:
2021-09-15 09:27:03 UTC
Severity:
wishlist
#992771#5
Date:
2021-08-23 08:03:50 UTC
From:
To:
Would you mind to add some sample code to usr.lib.ipsec.charon to
support logging, e.g. for writing to /var/log/charon.log ?

Currently its much easier to kick out apparmor than to figure out
how to extend usr.lib.ipsec.charon to make logging work. Surely
not the ideal solution.

Some note in charon-logging.conf pointing to usr.lib.ipsec.charon
would be helpful, too.


Thanx in advance
Harri

#992771#10
Date:
2021-08-23 14:20:42 UTC
From:
To:
	/var/log/charon.log rw

and to run

	apparmor_parser -r /etc/apparmor.d/usr.lib.ipsec.charon

Regards
Harri

#992771#15
Date:
2021-09-15 09:00:47 UTC
From:
To:
Hi,

I might be wrong, but I think the default charon-logging.conf only logs to
syslog, not to a specific file?

Regards,