mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/utils/aa-complain.pod

60 lines
1.9 KiB
Text
Raw Normal View History

update the man pages to: * add Canonical to the headers of the pod files touched * use aa_change_hat() instead of change_hat() (LP: #692216) * use http://wiki.apparmor.net in the SEE ALSO * use http://https://bugs.launchpad.net/apparmor/+filebug for bugs * prefix 'aa-' in SEE ALSO section for utilities (eg, 'aa-complain' for 'complain')
2010-12-20 13:47:09 -06:00
# This publication is intellectual property of Novell Inc. and Canonical
# Ltd. Its contents can be duplicated, either in part or in whole, provided
# that a copyright label is visibly located on each copy.
#
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
# All information found in this book has been compiled with utmost
# attention to detail. However, this does not guarantee complete accuracy.
update the man pages to: * add Canonical to the headers of the pod files touched * use aa_change_hat() instead of change_hat() (LP: #692216) * use http://wiki.apparmor.net in the SEE ALSO * use http://https://bugs.launchpad.net/apparmor/+filebug for bugs * prefix 'aa-' in SEE ALSO section for utilities (eg, 'aa-complain' for 'complain')
2010-12-20 13:47:09 -06:00
# Neither SUSE LINUX GmbH, Canonical Ltd, the authors, nor the translators
# shall be held liable for possible errors or the consequences thereof.
#
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
# Many of the software and hardware descriptions cited in this book
# are registered trademarks. All trade names are subject to copyright
# restrictions and may be registered trade marks. SUSE LINUX GmbH
update the man pages to: * add Canonical to the headers of the pod files touched * use aa_change_hat() instead of change_hat() (LP: #692216) * use http://wiki.apparmor.net in the SEE ALSO * use http://https://bugs.launchpad.net/apparmor/+filebug for bugs * prefix 'aa-' in SEE ALSO section for utilities (eg, 'aa-complain' for 'complain')
2010-12-20 13:47:09 -06:00
# and Canonical Ltd. essentially adhere to the manufacturer's spelling.
#
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
# Names of products and trademarks appearing in this book (with or without
# specific notation) are likewise subject to trademark and trade protection
# laws and may thus fall under copyright restrictions.
update the man pages to: * add Canonical to the headers of the pod files touched * use aa_change_hat() instead of change_hat() (LP: #692216) * use http://wiki.apparmor.net in the SEE ALSO * use http://https://bugs.launchpad.net/apparmor/+filebug for bugs * prefix 'aa-' in SEE ALSO section for utilities (eg, 'aa-complain' for 'complain')
2010-12-20 13:47:09 -06:00
#
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
=pod
=head1 NAME
rev 63-64, fixes man pages, messages
2013-09-20 19:20:41 +05:30
aa-complain - set an AppArmor security profile to I<complain> mode.
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
=head1 SYNOPSIS
Add --no-reload to various utils manpages This option exists in several aa-* tools since 2.9, but isn't mentioned in the manpage. Also drop some trailing whitespace in the manpages. Acked-by: John Johansen <john.johansen@canonical.com> for 2.9, 2.10, 2.11 and trunk.
2017-07-23 21:29:53 +02:00
B<aa-complain I<E<lt>executableE<gt>> [I<E<lt>executableE<gt>> ...] [I<-d /path/to/profiles>] [I<--no-reload>]>
Added manpages for the tools, fixes from rev 59..62, some fixes from rev 58
2013-09-19 10:32:19 +05:30
=head1 OPTIONS
B<-d --dir /path/to/profiles>
Specifies where to look for the AppArmor security profile set.
Defaults to /etc/apparmor.d.
Add --no-reload to various utils manpages This option exists in several aa-* tools since 2.9, but isn't mentioned in the manpage. Also drop some trailing whitespace in the manpages. Acked-by: John Johansen <john.johansen@canonical.com> for 2.9, 2.10, 2.11 and trunk.
2017-07-23 21:29:53 +02:00
B<--no-reload>
Do not reload the profile after modifying it.
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
=head1 DESCRIPTION
Merge in Kshitij Gupta <kgupta8592@gmail.com>'s rewrite of the logprof/genprof and related utilities in python. Because the branch that was worked on was not based on the apparmor tree, not all of the history can be maintained for files that are not newly created or entirely rewritten in the branch. (This merge also includes a subsequent commit to the branch I was merging from which includes my missed bzr add of utils/apparmor/translations.py)
2014-02-12 15:54:00 -08:00
B<aa-complain> is used to set the enforcement mode for one or more profiles to I<complain> mode.
rev 63-64, fixes man pages, messages
2013-09-20 19:20:41 +05:30
In this mode security policy is not enforced but rather access violations
are logged to the system log.
Added manpages for the tools, fixes from rev 59..62, some fixes from rev 58
2013-09-19 10:32:19 +05:30
Add a note about still enforcing deny rules to aa-complain manpage This behaviour makes sense (for example to force the confined program to use a fallback path), but is probably surprising for users, so we should document it. References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=826218#37 Acked-by: John Johansen <john.johansen@canonical.com> for trunk, 2.10 and 2.9
2016-06-05 23:43:29 +02:00
Note that 'deny' rules will be enforced even in complain mode.
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
=head1 BUGS
update the man pages to: * add Canonical to the headers of the pod files touched * use aa_change_hat() instead of change_hat() (LP: #692216) * use http://wiki.apparmor.net in the SEE ALSO * use http://https://bugs.launchpad.net/apparmor/+filebug for bugs * prefix 'aa-' in SEE ALSO section for utilities (eg, 'aa-complain' for 'complain')
2010-12-20 13:47:09 -06:00
If you find any bugs, please report them at
fix broken URLs in various utils/*.pod files. (The broken URLs were introduced in r1582.) for utils/*.pod: Acked-by: Steve Beattie <steve@nxnw.org> for the other directories: Patch by Steve Beattie Acked-by: Christian Boltz <apparmor@cboltz.de>
2013-09-19 21:17:39 +02:00
L<https://bugs.launchpad.net/apparmor/+filebug>.
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
=head1 SEE ALSO
update documentation for aa-disable
2011-02-07 17:39:54 -06:00
apparmor(7), apparmor.d(5), aa-enforce(1), aa-disable(1),
all: Use HTTPS links for apparmor.net Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
2018-09-13 16:28:22 +00:00
aa_change_hat(2), and L<https://wiki.apparmor.net>.
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
=cut
Reference in a new issue Copy permalink