No luck, it seems:
May 4 19:33:22 canopus kernel: [89276.033238] type=1505 audit(1272958402.718:44): operation="profile_replace" pid=25336 name="/usr/sbin/ntpd" May 4 19:45:48 canopus kernel: [90022.162272] type=1503 audit(1272959148.846:45): operation="mknod" pid=1237 parent=1 profile="/usr/sbin/ntpd" requested_mask="c::" denied_mask="c::" fsuid=115 ouid=115 name="/var/log/ntpstats/sysstats.2010w17"
I will check my changes again later tonight.
No luck, it seems:
May 4 19:33:22 canopus kernel: [89276.033238] type=1505 audit(127295840 2.718:44) : operation= "profile_ replace" pid=25336 name="/ usr/sbin/ ntpd" 8.846:45) : operation="mknod" pid=1237 parent=1 profile= "/usr/sbin/ ntpd" requested_ mask="c: :" denied_mask="c::" fsuid=115 ouid=115 name="/ var/log/ ntpstats/ sysstats. 2010w17"
May 4 19:45:48 canopus kernel: [90022.162272] type=1503 audit(127295914
I will check my changes again later tonight.