1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
# This publication is intellectual property of Canonical Ltd. Its contents
# can be duplicated, either in part or in whole, provided that a copyright
# label is visibly located on each copy.
#
# All information found in this book has been compiled with utmost
# attention to detail. However, this does not guarantee complete accuracy.
# Neither Canonical Ltd, the authors, nor the translators shall be held
# liable for possible errors or the consequences thereof.
#
# Many of the software and hardware descriptions cited in this book
# are registered trademarks. All trade names are subject to copyright
# restrictions and may be registered trade marks. Canonical Ltd
# essentially adheres to the manufacturer's spelling.
#
# Names of products and trademarks appearing in this book (with or without
# specific notation) are likewise subject to trademark and trade protection
# laws and may thus fall under copyright restrictions.
#
=pod
=head1 NAME
aa-notify - display information about logged AppArmor messages.
=head1 SYNOPSIS
B<aa-notify> [option]
=head1 DESCRIPTION
B<aa-notify> will display a summary or provide desktop notifications
for AppArmor DENIED messages.
=head1 OPTIONS
B<aa-notify> accepts the following arguments:
=over 4
=item -p, --poll
poll AppArmor logs and display desktop notifications. Can be used with '-s'
option to display a summary on startup.
=item -f FILE, --file=FILE
search FILE for AppArmor messages
=item -l, --since-last
show summary since last login.
=item -s NUM, --since-days=NUM
show summary for last NUM of days.
=item -u USER, --user=USER
user to drop privileges to when running privileged. When used with the -p
option, this should be set to the user that will receive desktop notifications.
This has no effect when running under sudo.
=item -w NUM, --wait=NUM
wait NUM seconds before displaying notifications (for use with -p)
=item -v, --verbose
show messages with summaries.
=item -h, --help
displays a short usage statement.
=back
=head1 CONFIGURATION
System-wide configuration for B<aa-notify> is done via
/etc/apparmor/notify.conf:
# set to 'yes' to enable AppArmor DENIED notifications
show_notifications="yes"
# only people in use_group can use aa-notify
use_group="admin"
Per-user configuration is done via ~/.apparmor/notify.conf:
# set to 'yes' to enable AppArmor DENIED notifications
show_notifications="yes"
=head1 BUGS
B<aa-notify> needs to be able to read the logfiles containing the
AppArmor DENIED messages.
If you find any additional bugs, please report them to Launchpad at
L<https://bugs.launchpad.net/apparmor/+filebug>.
=head1 SEE ALSO
apparmor(7)
=cut
|
