[ 0.050577] Security Framework initialized [ 0.050597] AppArmor: AppArmor initialized [ 0.185644] evm: security.selinux [ 0.185645] evm: security.SMACK64 [ 0.185645] evm: security.SMACK64EXEC [ 0.185645] evm: security.SMACK64TRANSMUTE [ 0.185646] evm: security.SMACK64MMAP [ 0.185646] evm: security.ima [ 0.185647] evm: security.capability [ 0.619640] AppArmor: AppArmor Filesystem Enabled [ 1.393534] audit: type=2000 audit(1502022364.128:1): initialized [ 1.517488] AppArmor: AppArmor sha1 policy hashing enabled [ 32.022831] systemd[1]: systemd 229 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN) [ 44.510353] audit: type=1400 audit(1502022407.482:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/snapd/snap-confine" pid=2472 comm="apparmor_parser" [ 44.510355] audit: type=1400 audit(1502022407.482:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=2472 comm="apparmor_parser" [ 44.516717] audit: type=1400 audit(1502022407.490:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ippusbxd" pid=2475 comm="apparmor_parser" [ 44.522782] audit: type=1400 audit(1502022407.494:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/sbin/dhclient" pid=2468 comm="apparmor_parser" [ 44.522783] audit: type=1400 audit(1502022407.494:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=2468 comm="apparmor_parser" [ 44.522784] audit: type=1400 audit(1502022407.494:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=2468 comm="apparmor_parser" [ 44.522802] audit: type=1400 audit(1502022407.494:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=2468 comm="apparmor_parser" [ 44.526784] audit: type=1400 audit(1502022407.498:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cups-browsed" pid=2473 comm="apparmor_parser" [ 44.537009] audit: type=1400 audit(1502022407.510:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=2474 comm="apparmor_parser" [ 44.537010] audit: type=1400 audit(1502022407.510:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cupsd" pid=2474 comm="apparmor_parser" [ 3757.635383] audit: type=1400 audit(1502026120.377:23): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/freshclam" pid=24725 comm="apparmor_parser" [ 3982.498622] audit: type=1400 audit(1502026345.218:24): apparmor="DENIED" operation="open" profile="/usr/bin/freshclam" name="/proc/24933/status" pid=24933 comm="freshclam" requested_mask="r" denied_mask="r" fsuid=120 ouid=0 [12028.768356] SGI XFS with ACLs, security attributes, realtime, no debug enabled