2013-09-19 10:32:19 +05:30
|
|
|
=pod
|
|
|
|
|
|
|
|
|
|
=head1 NAME
|
|
|
|
|
|
2013-09-20 19:20:41 +05:30
|
|
|
aa-audit - set an AppArmor security profile to I<audit> mode.
|
2013-09-19 10:32:19 +05:30
|
|
|
|
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
|
|
|
|
|
|
B<aa-audit I<E<lt>executableE<gt>> [I<E<lt>executableE<gt>> ...] [I<-d /path/to/profiles>] [I<-r>]>
|
|
|
|
|
|
|
|
|
|
=head1 OPTIONS
|
|
|
|
|
|
|
|
|
|
B<-d --dir /path/to/profiles>
|
|
|
|
|
|
|
|
|
|
Specifies where to look for the AppArmor security profile set.
|
|
|
|
|
Defaults to /etc/apparmor.d.
|
|
|
|
|
|
|
|
|
|
B<-r --remove>
|
|
|
|
|
|
|
|
|
|
Removes the audit mode for the profile.
|
|
|
|
|
|
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
|
|
2013-09-20 19:20:41 +05:30
|
|
|
B<aa-audit> is used to set one or more profiles to audit mode.
|
2013-09-19 10:32:19 +05:30
|
|
|
In this mode security policy is enforced and all access (successes and failures) are logged to the system log.
|
|
|
|
|
|
|
|
|
|
The I<--remove> option can be used to remove the audit mode for the profile.
|
|
|
|
|
|
|
|
|
|
=head1 BUGS
|
|
|
|
|
|
|
|
|
|
If you find any bugs, please report them at
|
2013-09-20 19:20:41 +05:30
|
|
|
L<https://bugs.launchpad.net/apparmor/+filebug>.
|
2013-09-19 10:32:19 +05:30
|
|
|
|
|
|
|
|
=head1 SEE ALSO
|
|
|
|
|
|
|
|
|
|
apparmor(7), apparmor.d(5), aa-enforce(1), aa-complain(1), aa-disable(1),
|
|
|
|
|
aa_change_hat(2), and L<http://wiki.apparmor.net>.
|
|
|
|
|
|
|
|
|
|
=cut
|
