Недавно в выводе logwatch заметил такие строки:
-------------------- Kernel Audit Begin ------------------------
Number of audit initializations: 1
**Unmatched Entries**
audit: type=1400 audit(1578474548.720:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=287 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578466884.604:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_groff" pid=288 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578466884.604:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_filter" pid=288 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578466884.648:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=296 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578466884.648:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=296 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578474548.792:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cups-browsed" pid=303 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578474548.720:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cupsd//third_party" pid=287 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578474548.712:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/clamd" pid=297 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578466884.604:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/man" pid=288 comm="apparmor_parser": 1 Time(s)
audit: type=1400 audit(1578474548.720:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cupsd" pid=287 comm="apparmor_parser": 1 Time(s)
---------------------- Kernel Audit End -------------------------
Может этот apparmor вообще выключить? Как-то он по дефолту запущен был на моем debian buster сервере…