apparmor/utils/notify.conf

# ------------------------------------------------------------------
#
#    Copyright (C) 2010 Canonical Ltd.
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

# Set to 'no' to disable AppArmor notifications globally
show_notifications="yes"

# OPTIONAL - restrict using aa-notify to users in the given group
# (if not set, everybody who has permissions to read the logfile can use it)
# use_group="admin"

# OPTIONAL - custom notification message body
# message_body="This is a custom notification message."

# OPTIONAL - custom notification message footer
# message_footer="For more information visit https://foo.com"
add utils/apparmor-notify and utils/notify.conf, but don't install yet 2010-01-28 10:25:09 -06:00			`# ------------------------------------------------------------------`
			`#`
			`# Copyright (C) 2010 Canonical Ltd.`
			`#`
			`# This program is free software; you can redistribute it and/or`
			`# modify it under the terms of version 2 of the GNU General Public`
			`# License published by the Free Software Foundation.`
			`#`
			`# ------------------------------------------------------------------`

Default apparmor_notify to report messages, when it is installed and started. Since apparmor_notify is not installed by default and not started by default, the act of installing and starting it implies the desire to get messages. 2010-09-09 10:31:45 -07:00			`# Set to 'no' to disable AppArmor notifications globally`
			`show_notifications="yes"`
add utils/apparmor-notify and utils/notify.conf, but don't install yet 2010-01-28 10:25:09 -06:00
comment out use_group to remove group restrictions use_group is only honored if it is defined. The "real" permission check is reading the logfile - the group check in aa-notify is just an annoying additional check, and the default "admin" only works on Ubuntu (other distributions typically use "wheel"). This commit comments out use_group in the default config, which allows everybody to use aa-notify. Permissions for reading the log file are of course still needed. References: https://bugzilla.opensuse.org/show_bug.cgi?id=1058787 2018-03-18 19:49:59 +01:00			`# OPTIONAL - restrict using aa-notify to users in the given group`
			`# (if not set, everybody who has permissions to read the logfile can use it)`
			`# use_group="admin"`
Update man page and default configuration for notify.conf 2018-02-26 14:43:19 +11:00
			`# OPTIONAL - custom notification message body`
			`# message_body="This is a custom notification message."`

			`# OPTIONAL - custom notification message footer`
			`# message_footer="For more information visit https://foo.com"`