Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #224464
| From | didier.gaumet@gmail.com |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: No "type=APPARMOR_ALLOWED/DENIED" logs |
| Date | 2020-07-07 00:10 +0200 |
| Message-ID | <ApHtf-1eC-5@gated-at.bofh.it> (permalink) |
| References | <Apibw-2pz-9@gated-at.bofh.it> <ApwxQ-32n-3@gated-at.bofh.it> <ApwxP-32n-1@gated-at.bofh.it> <ApGxb-FS-11@gated-at.bofh.it> <ApHtf-1eC-7@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
OK, I have read a little bit :-) Now I understand better the difference between enforce (for production) and complain (for testing/setup) modes and that they are mutually exclusive. man aa-genprof seems to indicate that the complain mode is set only during the generation of the profile: when aa-genprof exits the profile is in enforce mode. man -s7 apparmor seems to indicate (DEBUGGING section) that for the DENY messages to appear, you have to "Turn off deny audit quieting" and for the ALLOW messages to appear you have to "Force audit mode" Good luck :-)
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
No "type=APPARMOR_ALLOWED/DENIED" logs l0f4r0@tuta.io - 2020-07-05 21:10 +0200
Re: No "type=APPARMOR_ALLOWED/DENIED" logs didier.gaumet@gmail.com - 2020-07-06 12:30 +0200
Re: No "type=APPARMOR_ALLOWED/DENIED" logs l0f4r0@tuta.io - 2020-07-06 23:10 +0200
Re: No "type=APPARMOR_ALLOWED/DENIED" logs didier.gaumet@gmail.com - 2020-07-07 00:10 +0200
Re: No "type=APPARMOR_ALLOWED/DENIED" logs l0f4r0@tuta.io - 2020-07-08 01:00 +0200
csiph-web