In a fresh noble LXD VM I can reproduce this: apt install mysql-server apparmor ubuntu-bug mysql-server
Then View the report and it has: == KernLog ================================= apparmor AppArmor AppArmor audit( AppArmor AppArmor AppArmor AppArmor security selinux security security security security security apparmor security security audit( ... -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/2090887 Title: apport hook source_apparmor.py shows only one word per line Status in apparmor package in Ubuntu: New Bug description: As can be seen in some bugs collecting KernLog.txt, such as https://launchpadlibrarian.net/755520804/KernLog.txt from LP: #2085412, or https://launchpadlibrarian.net/748024373/KernLog.txt from LP: #2079912, only one word of each line is being shown: Security AppArmor AppArmor audit( AppArmor AppArmor AppArmor AppArmor security selinux security security security security security apparmor I haven't reproduced this behavior myself locally, so wonder if the reporters' kern.log files are odd, but I've seen this in several bug reports. I thought it might be the stringify() routine but running the apport hook manually on my own system, it works fine. Looking through the source_apparmor.py file I notice the words are ones matching the regular expression: sec_re = re.compile('audit\(|apparmor|selinux|security', re.IGNORECASE) report['KernLog'] = recent_kernlog(sec_re) That can't be a coincidence. However, I don't see how the code would produce this behavior, so no idea how to fix it. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2090887/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp