usr.sbin.rsyslogd apparmor audit.log /var/rsyslog/work/dbq.00000001 problem
I have came across audit.log file and found out errors like following:
I'd choose "/var/rsyslog/work/** rw" as it's more specific. Note you could also run aa-logprof on the log file (or grep relevant lines to a temporary file) and handle updating /etc/apparmor.d/usr.sbin.rsyslogd interactively.
|All times are GMT -5. The time now is 10:30 PM.|