mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 18:17:09 +00:00
62 lines
1.9 KiB
Plaintext
62 lines
1.9 KiB
Plaintext
|
# This publication is intellectual property of Novell Inc. and Canonical
|
||
|
|
# Ltd. Its contents can be duplicated, either in part or in whole, provided
|
||
|
|
# that a copyright label is visibly located on each copy.
|
||
|
|
#
|
||
|
|
# All information found in this book has been compiled with utmost
|
||
|
|
# attention to detail. However, this does not guarantee complete accuracy.
|
||
|
|
# Neither SUSE LINUX GmbH, Canonical Ltd, the authors, nor the translators
|
||
|
|
# shall be held liable for possible errors or the consequences thereof.
|
||
|
|
#
|
||
|
|
# Many of the software and hardware descriptions cited in this book
|
||
|
|
# are registered trademarks. All trade names are subject to copyright
|
||
|
|
# restrictions and may be registered trade marks. SUSE LINUX GmbH
|
||
|
|
# and Canonical Ltd. essentially adhere to the manufacturer's spelling.
|
||
|
|
#
|
||
|
|
# Names of products and trademarks appearing in this book (with or without
|
||
|
|
# specific notation) are likewise subject to trademark and trade protection
|
||
|
|
# laws and may thus fall under copyright restrictions.
|
||
|
|
#
|
||
|
|
|
||
|
|
|
||
|
|
=pod
|
||
|
|
|
||
|
|
=head1 NAME
|
||
|
|
|
||
|
|
aa-complain - set a AppArmor security profile to I<complain> mode.
|
||
|
|
|
||
|
|
=head1 SYNOPSIS
|
||
|
|
|
||
|
|
B<aa-complain I<E<lt>executableE<gt>> [I<E<lt>executableE<gt>> ...] [I<-d /path/to/profiles>] [I<-r>]>
|
||
|
|
|
||
|
|
=head1 OPTIONS
|
||
|
|
|
||
|
|
B<-d --dir /path/to/profiles>
|
||
|
|
|
||
|
|
Specifies where to look for the AppArmor security profile set.
|
||
|
|
Defaults to /etc/apparmor.d.
|
||
|
|
|
||
|
|
B<-r --remove>
|
||
|
|
|
||
|
|
Removes the complain mode for the profile.
|
||
|
|
|
||
|
|
=head1 DESCRIPTION
|
||
|
|
|
||
|
|
B<aa-complain> is used to set the enforcement mode for one or more profiles to
|
||
|
|
complain. In this mode security policy is not enforced but rather access
|
||
|
|
violations are logged to the system log.
|
||
|
|
|
||
|
|
The I<--remove> option can be used to remove the complain mode for the profile,
|
||
|
|
setting it to enforce mode by default.
|
||
|
|
|
||
|
|
=head1 BUGS
|
||
|
|
|
||
|
|
If you find any bugs, please report them at
|
||
|
|
L<https://bugs.launchpad.net/apparmor-profile-tools/+filebug>.
|
||
|
|
|
||
|
|
=head1 SEE ALSO
|
||
|
|
|
||
|
|
apparmor(7), apparmor.d(5), aa-enforce(1), aa-disable(1),
|
||
|
|
aa_change_hat(2), and L<http://wiki.apparmor.net>.
|
||
|
|
|
||
|
|
=cut
|