1.5 later with no feedback, let's assume the tentative fix works.
** Changed in: apparmor
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad
In the meantime (actually nearly a year ago), log parsing was rewritten
and now does de-duplication instantly. This should reduce memory usage a
lot - my experience is that especially large lots have lots of
duplication included.
I also removed some intermediate steps in the chain from logfile to
Is this still an issue on Ubuntu 14.04 or 14.10?
** Changed in: apparmor (Ubuntu)
Status: Confirmed => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/3876
** Tags added: aa-tools
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/387657
Title:
aa-logprof: doesn't handle large logs
Status in “apparmor” package in Ubuntu:
Inco
** Also affects: apparmor
Importance: Undecided
Status: New
** Changed in: apparmor
Importance: Undecided => Wishlist
** Changed in: apparmor
Status: New => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is su
I just checked the code - see aa.py do_logprof_pass(). Shortened quote
(comments removed):
log_reader = apparmor.logparser.ReadLog(pid, filename, existing_profiles,
profile_dir, log)
log = log_reader.read_log(logmark)
for root in log:
handle_children('', '', root)
for pi
A good (and even easier) start would be to check for duplicates in
add_to_tree() before blindly adding events to self.pid[loc_pid].
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net
** Changed in: apparmor (Ubuntu)
Status: Incomplete => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/387657
Title:
aa-logprof: doesn't handle large logs
Just for the records - bzr trunk contains some patches that make aa-
logprof faster *a lot* (~70% time saved) (thanks Peter!). Those patches
didn't even touch the functions I mentioned above, so there's still room
for improvement ;-)
--
You received this bug notification because you are a member
9 matches
Mail list logo