2013-09-19 10:32:19 +05:30
|
|
|
=pod
|
|
|
|
|
|
|
|
|
|
=head1 NAME
|
|
|
|
|
|
2013-09-20 19:20:41 +05:30
|
|
|
aa-audit - set an AppArmor security profile to I<audit> mode.
|
2013-09-19 10:32:19 +05:30
|
|
|
|
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
|
|
2017-07-23 21:29:53 +02:00
|
|
|
B<aa-audit I<E<lt>executableE<gt>> [I<E<lt>executableE<gt>> ...] [I<-d /path/to/profiles>] [I<--no-reload>] [I<-r>]>
|
2013-09-19 10:32:19 +05:30
|
|
|
|
|
|
|
|
=head1 OPTIONS
|
|
|
|
|
|
|
|
|
|
B<-d --dir /path/to/profiles>
|
|
|
|
|
|
|
|
|
|
Specifies where to look for the AppArmor security profile set.
|
|
|
|
|
Defaults to /etc/apparmor.d.
|
|
|
|
|
|
2017-07-23 21:29:53 +02:00
|
|
|
B<--no-reload>
|
|
|
|
|
Do not reload the profile after modifying it.
|
|
|
|
|
|
2013-09-19 10:32:19 +05:30
|
|
|
B<-r --remove>
|
|
|
|
|
|
2017-07-23 21:29:53 +02:00
|
|
|
Removes the audit mode for the profile.
|
2013-09-19 10:32:19 +05:30
|
|
|
|
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
|
|
2013-09-20 19:20:41 +05:30
|
|
|
B<aa-audit> is used to set one or more profiles to audit mode.
|
2013-09-19 10:32:19 +05:30
|
|
|
In this mode security policy is enforced and all access (successes and failures) are logged to the system log.
|
|
|
|
|
|
|
|
|
|
The I<--remove> option can be used to remove the audit mode for the profile.
|
|
|
|
|
|
|
|
|
|
=head1 BUGS
|
|
|
|
|
|
|
|
|
|
If you find any bugs, please report them at
|
2020-05-02 20:40:55 -07:00
|
|
|
L<https://gitlab.com/apparmor/apparmor/-/issues>.
|
2013-09-19 10:32:19 +05:30
|
|
|
|
|
|
|
|
=head1 SEE ALSO
|
|
|
|
|
|
|
|
|
|
apparmor(7), apparmor.d(5), aa-enforce(1), aa-complain(1), aa-disable(1),
|
2018-09-13 16:28:22 +00:00
|
|
|
aa_change_hat(2), and L<https://wiki.apparmor.net>.
|
2013-09-19 10:32:19 +05:30
|
|
|
|
|
|
|
|
=cut
|
