Upstream bug report was closed as wontfix in Feb 2024: https://github.com/linux-audit/audit-userspace/issues/351
I suppose it is technically accurate to say that "AVC" (Access Vector Cache) is traditionally SELinux-specific terminology. AppArmor and other MAC LSMs presumably employ some form of caching as well, although I am unsure whether referring to it as "AVC" would be incorrect. In any event, this is how AppArmor currently operates and has operated for a long time; changing it now could break a substantial number of custom tools that analyze audit logs in sites using AA. ausearch/aureport currently have no AppArmor-specific equivalent of "--avc", and introducing a different option for each LSM seems like poor UX to me. It's a weird quirk to use that term to mean policy decision audit entries anyway, isn't the cache just an internal optimization detail? It does not seem to me that the upstream project is very interested in supporting other than SELinux.
