Perhaps this can help with apparmor settings? I was trying to upload logs to Launchpad, so "ureadable files" could also include that. ################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Mon Feb 25 07:35:08 2013 Date Range Processed: yesterday ( 2013-Feb-24 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: arcadia.mikemestnik.net ################################################################## --------------------- Kernel Audit Begin ------------------------ *** Denials *** open /etc/asound.conf (/usr/lib/firefox/firefox{,*[^s][^h]} via plugin-containe): 3 times open /etc/ld.so.preload (/usr/lib/firefox/firefox{,*[^s][^h]} via firefox): 5 times open /etc/ld.so.preload (/usr/lib/firefox/firefox{,*[^s][^h]} via grep): 6 times open /etc/ld.so.preload (/usr/lib/firefox/firefox{,*[^s][^h]} via plugin-containe): 6 times open /etc/ld.so.preload (/usr/lib/firefox/firefox{,*[^s][^h]} via sh): 6 times open /var/log/apport.log.1 (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 3 times open /var/log/auth.log.0 (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times open /var/log/boot (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times open /var/log/boot.0 (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times open /var/log/daemon.log.0 (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times open /var/log/debug.0 (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times open /var/log/dpkg.log (/usr/lib/firefox/firefox{,*[^s][^h]} via firefox): 16 times open /var/log/syslog (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times open /var/log/syslog.0 (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times open /var/log/syslog.1 (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times open /var/log/udev (/usr/lib/firefox/firefox{,*[^s][^h]} via pool): 4 times **Unmatched Entries** type=1400 audit(1361744152.135:206): apparmor="DENIED" operation="capable" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" capability=19 capname="sys_ptrace" type=1400 audit(1361744152.135:207): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76602 type=1400 audit(1361744152.135:208): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76602 type=1400 audit(1361744152.135:209): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76602 type=1400 audit(1361744152.135:210): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76602 type=1400 audit(1361744152.135:211): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76602 type=1400 audit(1361744152.135:212): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76602 type=1400 audit(1361744152.135:213): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76602 type=1400 audit(1361744152.136:214): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76602 type=1400 audit(1361745366.524:1029): apparmor="DENIED" operation="capable" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" capability=19 capname="sys_ptrace" type=1400 audit(1361745366.524:1030): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76802 type=1400 audit(1361745366.524:1031): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76802 type=1400 audit(1361745366.524:1032): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76802 type=1400 audit(1361745366.524:1033): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76802 type=1400 audit(1361745366.524:1034): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76802 type=1400 audit(1361745398.805:1874): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76702 type=1400 audit(1361745398.805:1875): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76702 type=1400 audit(1361745398.805:1876): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76702 type=1400 audit(1361745398.805:1877): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76702 type=1400 audit(1361745398.805:1878): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76702 type=1400 audit(1361745398.805:1879): apparmor="DENIED" operation="ptrace" parent=7240 profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=7675 comm="firefox" target=F00240F7F00240F76702 ---------------------- Kernel Audit End ------------------------- --------------------- clam-update Begin ------------------------ Last ClamAV update process started at Sun Feb 24 23:38:06 2013 Last Status: main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven) daily.cld is up to date (version: 16735, sigs: 829925, f-level: 63, builder: neo) bytecode.cld is up to date (version: 214, sigs: 41, f-level: 63, builder: neo) ---------------------- clam-update End ------------------------- --------------------- dpkg status changes Begin ------------------------ Upgraded: xserver-xorg 1:7.6+12ubuntu1 => 1:7.6+12ubuntu2 Removed: linux-headers-3.8.0-996 3.8.0-996.201302220501 linux-headers-3.8.0-996-generic 3.8.0-996.201302220501 linux-image-3.8.0-996-generic 3.8.0-996.201302220501 linux-image-extra-3.8.0-996-generic 3.8.0-996.201302220501 Purged: linux-image-3.8.0-996-generic 3.8.0-996.201302220501 linux-image-extra-3.8.0-996-generic 3.8.0-996.201302220501 ---------------------- dpkg status changes End ------------------------- --------------------- Kernel Begin ------------------------ WARNING: Kernel Errors Present Buffer I/O error on device sr1, l ...: 20 Time(s) end_request: I/O error, dev sr0, sector ...: 38 Time(s) end_request: I/O error, dev sr1, sector ...: 38 Time(s) quiet_error: 2166 callbacks ...: 1 Time(s) ---------------------- Kernel End ------------------------- --------------------- pam_unix Begin ------------------------ su: Sessions Opened: cheako -> root: 1 Time(s) root -> mixmaster: 1 Time(s) root -> www-data: 1 Time(s) sudo: Sessions Opened: cheako -> root: 1 Time(s) ---------------------- pam_unix End ------------------------- --------------------- seaudit-report Begin ------------------------ Date Range: yesterday Detail Level: 0 Temp Dir: /tmp/logwatch.kU0kcoMp/ Debug Level: 0 # Begin # Report generated by seaudit-report on Mon Feb 25 07:35:10 2013 Title: SEAudit Log Report Log Statistics -------------- Number of total messages: 0 Number of policy load messages: 0 Number of policy boolean messages: 0 Number of allow messages: 0 Number of denied messages: 0 Policy Loads ------------ Number of messages: 0 Enforcement mode toggles ------------------------ Number of messages: 0 Policy boolean changes ---------------------- Number of messages: 0 Allow Listing ------------- Number of messages: 0 Deny Listing ------------ Number of messages: 0 Malformed messages ------------------- # End ---------------------- seaudit-report End ------------------------- --------------------- Connections (secure-log) Begin ------------------------ **Unmatched Entries** gnome-keyring-daemon: unsupported key algorithm in certificate: 1.2.840.10045.2.1: 10 Time(s) su: pam_ssh: /tmp/ssh-yLgXUYT18976/agent.18976: No such file or directory: 1 Time(s) ---------------------- Connections (secure-log) End ------------------------- --------------------- Smartd Begin ------------------------ /dev/sdc [SAT] : Usage: Temperature_Celsius (194) changed to 124, 123, 122, 123, 122, 130, 129, 125, 124, 125, **Unmatched Entries** Device: /dev/sda [SAT], unknown offline data collection status 0x83 Device: /dev/sda [SAT], offline data collection was completed without error (auto:on) ---------------------- Smartd End ------------------------- --------------------- Sudo (secure-log) Begin ------------------------ cheako => root -------------- /usr/bin/apt-get - 1 Time(s). **Unmatched Entries** pam_krb5(sudo:auth): authentication failure; logname=cheako uid=1000 euid=0 tty=/dev/pts/0 ruser=cheako rhost=: 1 Time(s) ---------------------- Sudo (secure-log) End ------------------------- --------------------- Syslog-ng Begin ------------------------ Syslog-ng reloaded: 2 Time(s) **** Unmatched entries **** Syslog connection established; fd='22', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 69 Time(s) Syslog connection established; fd='15', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 44 Time(s) Syslog connection established; fd='18', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 268 Time(s) Syslog connection broken; fd='14', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 89 Time(s) Syslog connection established; fd='24', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 1 Time(s) Syslog connection established; fd='23', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 13 Time(s) Syslog connection broken; fd='16', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 29 Time(s) Syslog connection established; fd='14', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 89 Time(s) Syslog connection broken; fd='18', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 268 Time(s) Syslog connection broken; fd='17', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 6 Time(s) Syslog connection established; fd='17', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 6 Time(s) Syslog connection broken; fd='24', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 1 Time(s) Syslog connection broken; fd='22', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 69 Time(s) Syslog connection broken; fd='23', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 13 Time(s) Syslog connection established; fd='19', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 43 Time(s) Syslog connection broken; fd='20', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 77 Time(s) Syslog connection broken; fd='19', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 43 Time(s) Syslog connection broken; fd='21', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 111 Time(s) Syslog connection broken; fd='15', server='AF_UNIX(/dev/log-remote)', time_reopen='60' : 44 Time(s) Syslog connection established; fd='20', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 77 Time(s) Syslog connection established; fd='21', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 111 Time(s) Syslog connection established; fd='16', server='AF_UNIX(/dev/log-remote)', local='AF_UNIX(anonymous)' : 29 Time(s) ---------------------- Syslog-ng End ------------------------- --------------------- vsftpd-messages Begin ------------------------ User FTP Logins: (10.10.10.25): cheako - 2 Time(s) (127.0.0.1): cheako - 3 Time(s) Failed FTP Logins: (10.10.10.25): cheako - 1 Time(s) (10.10.10.25): pasiv - 1 Time(s) (127.0.0.1): cheako - 3 Time(s) ---------------------- vsftpd-messages End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/mapper/fsRoot 60G 33G 24G 59% / udev 4.9G 44K 4.9G 1% /dev /dev/mapper/fsUsr.ro 4.1G 4.1G 0 100% /.usr-ro /dev/mapper/fsUsr.rw 7.9G 761M 6.8G 10% /.usr-rw /dev/mapper/fsUsr 16G 10G 5.0G 67% /usr /dev/mapper/fsVar 15G 2.5G 12G 18% /var /dev/mapper/fsUsrLocal 9.9G 182M 9.2G 2% /usr/local /dev/mapper/fsHome 247G 108G 127G 46% /home /dev/mapper/fsWine 197G 88G 100G 47% /wine /dev/mapper/Arcadia-lvol0 30G 122M 28G 1% /s3ql-cache /dev/mapper/Arcadia-Boot 98M 31M 63M 33% /boot /dev/mapper/fsUsr.ro => 100% Used. Warning. Disk Filling up. ---------------------- Disk Space End ------------------------- --------------------- Fortune Begin ------------------------ fortune: no place to put residual probability (0%) ---------------------- Fortune End ------------------------- ###################### Logwatch End #########################