$ grep -a "apparmor" /var/log/syslog
May 26 12:18:53 RHSSRV01 kernel: [916214.084407] audit: type=1400 audit(1590495533.340:59): apparmor="DENIED" operation="mknod" profile="/usr/sbin/named" name="/var/tmp/krb5_RCaPOWNB" pid=17982 comm="isc-worker0000" requested_mask="c" denied_mask="c" fsuid=112 ouid=112
May 26 14:15:06 RHSSRV01 kernel: [923187.419278] audit: type=1400 audit(1590502506.568:60): apparmor="DENIED" operation="mknod" profile="/usr/sbin/named" name="/var/tmp/krb5_RC0DsYsh" pid=17982 comm="isc-worker0003" requested_mask="c" denied_mask="c" fsuid=112 ouid=112
May 26 16:09:17 RHSSRV01 kernel: [930038.446471] audit: type=1400 audit(1590509357.490:61): apparmor="DENIED" operation="mknod" profile="/usr/sbin/named" name="/var/tmp/krb5_RC3bWudS" pid=17982 comm="isc-worker0002" requested_mask="c" denied_mask="c" fsuid=112 ouid=112
