On systems with auditd installed, the /var/log/audit/audit.log file is used.
AppArmor's dbus mediation is managed through dbus itself. Its logs would not go into the kern.log file.
It might be about time to remove /var/log/messages; at least I don't have it on my last 12.04 LTS precise system, so it hasn't been used in Ubuntu in a while; but it may still be used on other distributions.
Hi sles; thanks for the bug report.
On systems with auditd installed, the /var/log/ audit/audit. log file is used.
AppArmor's dbus mediation is managed through dbus itself. Its logs would not go into the kern.log file.
It might be about time to remove /var/log/messages; at least I don't have it on my last 12.04 LTS precise system, so it hasn't been used in Ubuntu in a while; but it may still be used on other distributions.
Thanks