LNX
AppArmor - Linux
CanonicalLog file
/var/log/audit/audit.log- Via auditd when installed; otherwise /var/log/kern.log or journalctl -kAppArmor
1 log location · Linux
Where AppArmor keeps its logs
AppArmor logs to /var/log/audit/audit.log on Linux.
Paths are printed exactly as AppArmor writes them. Environment variables like %LOCALAPPDATA% and $XDG_STATE_HOME are never expanded, so a path can be pasted straight into a shell. Where a path differs between installer types or shipping flavours, each one is racked as its own card below - why that happens.
Finding your way around Linux.