Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

How can I get live notifications on my desktop whenever an AppArmor denied message is triggered?

share|improve this question
add comment

2 Answers 2

up vote 1 down vote accepted

This can be done with apparmor-notify

  1. Install it through apt (sudo apt-get install apparmor-notify)
  2. In /etc/apparmor/notify.conf change the usergroup to 'adm' (all users using sudo are in this group)
  3. add aa-notify -p to your startup applications.

You can then test it by triggering a AppArmor Denied event with

sudo tcpdump -i eth0 -n -s 0 -w /foo
share|improve this answer
add comment

I've been hunting all round but it appears most info is outdated; where does one find up to date information regarding AppArmor? (apparmor-notify is not available anymore (13.10))

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.