Novell APPARMOR Admin Manual page 73

Setting Up Event Notification
dhcp-101.up.wirex.com has had 10 security events since Tue
Oct 12 11:10:00 2004
• Summary Notification: The Summary notification displays SubDo-
main security events that are logged and lists the number of individ-
ual occurrences, including the date of the last occurrence. For
example:
SubDomain:
(httpd2-prefork(6347)
active /usr/sbin/httpd2-prefork) 2 times, the latest at
Sat Oct 9 16:05:54 2004.
• Verbose Notification: The Verbose notification displays unmodified,
logged SubDomain security events. It tells you every time an event
occurs and writes a new line in the Verbose log. These security
events include the date and time the event occurred, when the appli-
cation profile permits access as well as rejects access, and the type
of file permission access that is permitted or rejected. Verbose Notifi-
c a t i o n a l s o r e p o r t s s e v e r a l me s s a g e s t h a t t h e l o g p r o f t o o l ( s e e " Log-
prof" o n p a g e6 1 ) u s e s t o i n t e r p r e t p r o f i l e s . F o r e x a mp l e :
• O c t 9 1 5 : 4 0 : 3 1 S u b D o m a i n : P E R M I T T I N G r a c c e s s t o
/etc/apache2/httpd.conf (httpd2-prefork(6068) profile
/usr/sbin/httpd2-prefork active /usr/sbin/httpd2-pre-
fork)
T o e n a b l e S e c u r i t y E v e n t N o t i f i c a t i o n , r e f e r t o " Managing Nov-
Note:
ell AppArmor and Security Event Status" o n p a g e4 3 . T h e E n a b l e
Security Event Notification screen displays as follows:
PERMITTING access
profile
to capability 'setgid'
/usr/sbin/httpd2-prefork
73