audit(8) [suse man page]

AUDIT(8)							     AppArmor								  AUDIT(8)

NAME

       aa-audit - set a AppArmor security profile to audit mode.

SYNOPSIS

       aa-audit <executable> [<executable> ...]

DESCRIPTION

       aa-audit is used to set the audit mode for one or more profiles to audit.  In this mode security policy is enforced and all access
       (successes and failures) are logged to the system log.

BUGS

       None. Please report any you find to bugzilla at <http://bugzilla.novell.com>.

SEE ALSO

       apparmor(7), apparmor.d(5), aa-enforce(1), aa-complain(1), change_hat(2), and <http://forge.novell.com/modules/xfmod/project/?apparmor>.

NOVELL
/SUSE							    2008-06-11								  AUDIT(8)

UNCONFINED(8)							     AppArmor							     UNCONFINED(8)

NAME

       aa-unconfined - output a list of processes with tcp or udp ports that do not have AppArmor profiles loaded

SYNOPSIS

       aa-unconfined

DESCRIPTION

       aa-unconfined will use netstat(8) to determine which processes have open network sockets and do not have AppArmor profiles loaded into the
       kernel.

BUGS

       aa-unconfined must be run as root to retrieve the process executable link from the /proc filesystem. This program is susceptible to race
       conditions of several flavours: an unlinked executable will be mishandled; an executable started before a AppArmor profile is loaded will
       not appear in the output, despite running without confinement; a process that dies between the netstat(8) and further checks will be
       mishandled. This program only lists processes using TCP and UDP. In short, this program is unsuitable for forensics use and is provided
       only as an aid to profiling all network-accessible processes in the lab.

       If you find any bugs, please report them to bugzilla at <http://bugzilla.novell.com>.

SEE ALSO

       netstat(8), apparmor(7), apparmor.d(5), change_hat(2), and <http://forge.novell.com/modules/xfmod/project/?apparmor>.

NOVELL
/SUSE							    2008-06-11							     UNCONFINED(8)