Novell LINUX ENTERPRISE DESKTOP 11, Руководство пользователя

Страница: 366 / 450

5 Modify the fields with the following filtering information, as necessary:
Program Name
You can specify a program name or pattern that matches the name of the
binary executable for the program of interest. The report displays security
events that have occurred for the specified program only.
Profile Name
You can specify the name of the profile for which to display security events.
You can use this to see what is being confined by a specific profile.
PID Number
Process ID number is a number that uniquely identifies one specific process
or running program (this number is valid only during the lifetime of that
process).
Detail
A source to which the profile has denied access. This includes capabilities
and files. You can use this field to create a report of resources to which
profiles prevent access.
Severity
Select the lowest severity level for security events to include in the report.
The selected severity level and above are included in the reports.
Access Type
The access type describes what is actually happening with the security event.
The options are
PERMITTING
,
REJECTING
, or
AUDITING
.
Mode
The mode is the permission that the profile grants to the program or process
to which it is applied. The options are
r
(read),
w
(write),
l
(link), and
x
(execute).
6 Select Save to save the changes to this report. Novell AppArmor returns to the
Scheduled Reports main window where the scheduled report appears in the list
of reports.
352 Security Guide