aa−decode − decode hex−encoded in AppArmor log files
aa-decode [option] < HEX STRING >
aa-decode will decode hex-encoded strings as seen in AppArmor log output. It will also take an audit log on standard input and convert any hex-encoded AppArmor log entries and display them on standard output.
−−help
displays a short usage statement.
$
aa−decode 2F746D702F666F6F20626172
Decoded: /tmp/foo bar
$ cat /var/log/kern.log | aa−decode
... denied_mask="r::" fsuid=1000 ouid=1000
name=/tmp/foo bar
None. Please report any you find to gitlab at <https://gitlab.com/apparmor/apparmor/−/issues>.
apparmor(7)