Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #224464

Re: No "type=APPARMOR_ALLOWED/DENIED" logs

From didier.gaumet@gmail.com
Newsgroups linux.debian.user
Subject Re: No "type=APPARMOR_ALLOWED/DENIED" logs
Date 2020-07-07 00:10 +0200
Message-ID <ApHtf-1eC-5@gated-at.bofh.it> (permalink)
References <Apibw-2pz-9@gated-at.bofh.it> <ApwxQ-32n-3@gated-at.bofh.it> <ApwxP-32n-1@gated-at.bofh.it> <ApGxb-FS-11@gated-at.bofh.it> <ApHtf-1eC-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


OK, I have read a little bit :-)

Now I understand better the difference between enforce (for production) and complain (for testing/setup) modes and that they are mutually exclusive.

man aa-genprof seems to indicate that the complain mode is set only during the generation of the profile: when aa-genprof exits the profile is in enforce mode.

man -s7 apparmor seems to indicate (DEBUGGING section) that for the DENY messages to appear, you have to "Turn off deny audit quieting" and for the ALLOW messages to appear you have to "Force audit mode"

Good luck :-)

Back to linux.debian.user | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

No "type=APPARMOR_ALLOWED/DENIED" logs l0f4r0@tuta.io - 2020-07-05 21:10 +0200
  Re: No "type=APPARMOR_ALLOWED/DENIED" logs didier.gaumet@gmail.com - 2020-07-06 12:30 +0200
    Re: No "type=APPARMOR_ALLOWED/DENIED" logs l0f4r0@tuta.io - 2020-07-06 23:10 +0200
      Re: No "type=APPARMOR_ALLOWED/DENIED" logs didier.gaumet@gmail.com - 2020-07-07 00:10 +0200
        Re: No "type=APPARMOR_ALLOWED/DENIED" logs l0f4r0@tuta.io - 2020-07-08 01:00 +0200

csiph-web