Novell APPARMOR 1.2, Руководство администратора, Страница: 94 / 130

4 The Report Configuration Dialog enables you to filter the reports selected in the
previous screen. Enter the desired filter details. The following filter options are
available:
Date Range
To limit reports to a certain time period, select Filter By Date Range. Enter
the start and end dates that determine the scope of the report.
Program Name
When you enter a program name or pattern that matches the name of the bi-
nary executable for the program of interest, the report displays security events
that have occurred for the specified program only.
Profile Name
When you enter the name of the profile, the report displays the security
events that are generated for the specified profile. You can use this to see
what is being confined by a specific profile.
PID Number
Process ID number is a number that uniquely identifies one specific process
or running program (this number is valid only during the lifetime of that
process).
Severity Level
Select the lowest severity level for security events to include in the report.
The selected severity level and above are included in the reports.
Detail
A source to which the profile has denied access. This includes capabilities
and files. You can use this field to report the resources to which profiles
prevent access.
Access Type
The access type describes what is actually happening with the security event.
The options are
PERMITTING
,
REJECTING
, or
AUDITING
.
Mode
The mode is the permission that the profile grants to the program or process
to which it is applied. The options are
r
(read),
w
(write),
l
(link), and
x
(execute).
94