Ubuntu

What are these strange dmesg entries?

Asked by Justin Dugger

[ 18.673752] type=1505 audit(1240159967.221:2): operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" name2="default" pid=2197
[ 18.730952] type=1505 audit(1240159967.278:3): operation="profile_load" name="/sbin/dhclient-script" name2="default" pid=2201
[ 18.731093] type=1505 audit(1240159967.278:4): operation="profile_load" name="/sbin/dhclient3" name2="default" pid=2201
[ 18.731141] type=1505 audit(1240159967.278:5): operation="profile_load" name="/usr/lib/NetworkManager/nm-dhcp-client.action" name2="default" pid=2201
[ 18.731182] type=1505 audit(1240159967.278:6): operation="profile_load" name="/usr/lib/connman/scripts/dhclient-script" name2="default" pid=2201
[ 18.871720] type=1505 audit(1240159967.417:7): operation="profile_load" name="/usr/lib/cups/backend/cups-pdf" name2="default" pid=2206
[ 18.871913] type=1505 audit(1240159967.417:8): operation="profile_load" name="/usr/sbin/cupsd" name2="default" pid=2206
[ 18.909533] type=1505 audit(1240159967.458:9): operation="profile_load" name="/usr/sbin/tcpdump" name2="default" pid=2210

And what does it mean?

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Solved by:
Jakob Hilmer
Solved:
Last query:
Last reply:
Revision history for this message
Best Jakob Hilmer (jakob-hilmer) said : 		#1

It is entiries about loading of appamor entries. AppAmor is a way to make a fine grain control to which resource a program can access. Read more here:

https://help.ubuntu.com/community/AppArmor

Cheers,

Jakob Hilmer

Revision history for this message
AFarris01 (afarris01) said : 		#2

those dmesg entries all look perfectly normal to me...

they appear to be reporting that the configurations for various apps have been loaded. near as i can tell this is what services they are:

"/usr/share/gdm/guest-session/Xsession" = the 'Guest Session' login option on the user switcher
"/sbin/dhclient-script" = DHCP client configuration... most likely a helper for the NetworkManager
"/sbin/dhclient3" =Similar to the above... provides more network-related functions
"/usr/lib/NetworkManager/nm-dhcp-client.action" = The Network Manager is doing something, most likely setting up a network connection
"/usr/lib/connman/scripts/dhclient-script" = connection manager... a helper for Network Manager
"/usr/lib/cups/backend/cups-pdf" = This is the CUPS (Common Unix Printing System) PDF exporter... i.e. when you click print, and save to file, you can select 'save as PDF'
"/usr/sbin/cupsd" = the CUPS client
"/usr/sbin/tcpdump" =not positive what this one does, but it also has something to do with your networking

Hope that was helpful!

Revision history for this message
Justin Dugger (jldugger) said : 		#3

I'm generally aware of what the packages are, but it's not clear to me what the messages are about or where they originated. If these are just informational, then I guess I'm okay with that.

Revision history for this message
Justin Dugger (jldugger) said : 		#4

Thanks Jakob Hilmer, that solved my question.

Revision history for this message
moron (slave-codegrunt) said : 		#5

The last entry seems a tad strange to me:

"/usr/sbin/tcpdump"

tcpdump is used for dumping net traffic, usually to a file. It is commonly used for sniffing network traffic for example and I have no idea why tcpdump should be autoloading as a service. I am seeing a similar entry on my local machine in the dmesg history and definitely am interested in the source / reason.

Cheers