[Pkg-swan-devel] Bug#992771: Bug#992771: please improve support for apparmor

[Harald Dunkel]

You have to set the path parameter in charon-logging.conf to write
a private log file without syslog and journal, e.g.

charon {

     # Section to define file loggers, see LOGGER CONFIGURATION in
     # strongswan.conf(5).
     # See also https://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration
     filelog {

         charon {
             :
             # Optional path to the log file. Overrides the section name. Must be
             # used if the path contains characters that aren't allowed in
             # section names.

             path = /var/log/charon.log
             :
         }
     }
}

Problem is, this fails silently, if apparmor is installed. Even
if you discover the apparmor messages about /var/log/charon.log,
fixing this is still difficult.