Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 08-05-2008 Installation Manual page 896

48.3.3 Configuring Novell AppArmor Event
Set up event notification in Novell AppArmor so you can review security events. Event
Notification is an Novell AppArmor feature that informs a specified e-mail recipient
when systemic Novell AppArmor activity occurs under the chosen severity level. This
feature is currently available in the YaST interface.
To set up event notification in YaST, proceed as follows:
1 Make sure that a mail server is running on your system to deliver the event noti-
2 Log in as root and start YaST. Then select Novell AppArmor > AppArmor
3 In Enable Security Event Notification, select Configure.
4 For each record type (Terse, Summary, and Verbose), set a report frequency,
5 Leave this dialog with OK > Done to apply your settings.
Using Novell AppArmor reports, you can read important Novell AppArmor security
events reported in the log files without manually sifting through the cumbersome mes-
sages only useful to the aa-logprof tool. You can decrease the size of the report by fil-
tering by date range or program name.
To configure the AppArmor reports, proceed as follows:
1 Log in as root and start YaST. Select Novell AppArmor > AppArmor Reports.
878 Installation and Administration
Notification and Reports
fications.
Control Panel).
enter the e-mail address that should receive the reports, and determine the
severity of events to log. To include unknown events in the event reports, check
Include Unknown Severity Events.
NOTE: Selecting Events to Log
Unless you are familiar with AppArmor's event categorization, choose to
be notified about events for all security levels.