Apparmor creates huge events.db

Ossah · 03-26-2007, 11:17 AM

Hi there!

Apparmor is quite constantly filling the events.db. It 5GB collected over 2 months. Just staring the computer causes aa-eventd to write about 70MB to events.db. I ran the reports from within yast but couldn't find anything suspicious.

This can't be normal. How can I figure out which application causes aa to run bezerk? Or is it just a configuration issue?

I'm quite new to AppArmor but read the documentation though.

I appreciate your help!

unSpawn · 04-03-2007, 12:53 AM

I don't even know AppArmor at all. I guess you need to read some docs on configuring it, maybe you need to add some exclusion rules 'n such. If you use the "AppArmor Profiling Wizard", does the reporting provide enough clues?