Configuring Novell Apparmor Event Notification And Reports - Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual

AppArmor activities at all. However, if you notice certain misbehavior with your appli-
cation, check the system logs and see if AppArmor is too tightly confining your appli-
cation. Depending on the log mechanism used on your system, there are several places
to look for AppArmor log entries:
/var/log/audit/audit.log
/var/log/messages
dmesg
To adjust the profile, analyze the log messages relating to this application again as de-
scribed in
TIP: For More Information
For more information about profile building and modification, refer to
ter 21, Profile Components and Syntax
Managing Profiles with YaST
the Command Line
19.5 Configuring Novell AppArmor
Set up event notification in Novell AppArmor so you can review security events. Event
Notification is an Novell AppArmor feature that informs a specified e-mail recipient
when systemic Novell AppArmor activity occurs under the chosen severity level. This
feature is currently available in the YaST interface.
To set up event notification in YaST, proceed as follows:
1 Make sure that a mail server is running on your system to deliver the event noti-
2 Start YaST. Then select Novell AppArmor > AppArmor Control Panel. In Secu-
3 For each record type (Terse, Summary, and Verbose), set a report frequency,
184 Security Guide
Step 3 (page 183). Determine the access rights or restrictions when prompted.
(page 247).
Event Notification and Reports
fications.
rity Event Notification, select Configure.
enter the e-mail address that should receive the reports, and determine the
(page 197),
(page 225), and Chapter 24, Building Profiles from
Chapter 23, Building and
Chap-