[Apparmor-general] AppArmor Reports

[Crispin Cowan]

Photonen Pumpe wrote:
> Hello, I´m trying to get AppArmor working on my openSuse 10.2 System.
> Configuring seemed not to be a problem an it worked properly. I wrote
> an test Script that tries to modify the /etc/passwd in order to verify
> the function.  When I run the script access to /etc/passwd is not
> permitted. So I start to configure the reports, but something doesnt
> work properly or I make some nooby failures. When I want to generate
> an automatic  Security Incident Report, the mail is sent but in the
> export File is noting reported about a permitted acccess to
> /etc/passwd, although the Script Access was permitted.  Where is my
> failure? I would be very happy if anyone would give me a hint...
You would have to be more specific about exactly what you did to detect
the failure.

You did not mention running the "add profile wizard" in YaST or genprof
from the command line, so it could be that you put the profile into
complain mode, but never ran the software to transform you log events
into a policy.

Crispin

-- 
Crispin Cowan, Ph.D.               http://crispincowan.com/~crispin/
Director of Software Engineering   http://novell.com