Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 303

Verbose Notification
Verbose notification displays unmodified, logged Novell AppArmor security events.
It tells you every time an event occurs and writes a new line in the verbose log.
These security events include the date and time the event occurred, when the appli-
cation profile permits and rejects access, and the type of file permission access that
is permitted or rejected. Verbose notification also reports several messages that the
aa-logprof tool (see
uses to interpret profiles. For example:
type=APPARMOR_DENIED msg=audit(1189428793.218:2880):
operation="file_permission" requested_mask="::w" denied_mask="::w"
fsuid=1000 name="/var/log/apache2/error_log" pid=22969
profile="/usr/sbin/httpd2-prefork"
NOTE
You must set up a mail server that can send outgoing mail using the SMTP
protocol (for example, postfix or exim) for event notification to work.
1 In the Enable Security Event Notification section of the AppArmor Configuration
window, click Configure.
2 In the Security Event Notification window, enable Terse, Summary, or Verbose
event notification.
Section "aa-logprof—Scanning the System Log" (page 266))
Managing Profiled Applications 291