ccs-notifyd(8)

ccs-notifyd8

Notify tomoyo linux's policy violation

Usage

ccs-notifyd timeout action

Overview

This program detects policy violation in enforcing mode and notify users (e.g. send a mail). You can know the first occurence of policy violation in enforcing mode as soon as possible. You may use this program for holding your judgement of the request that violates policy in enforcing mode provided that you can login to the system and start "ccs-queryd" command for responding within timeout seconds.

Examples

# ccs-notifyd 180 'mail [email protected]'

Wait for 180 seconds before rejecting the request. The occurrence is notified by sending mail to [email protected] (if SMTP service is available).

# ccs-notifyd 0 'curl --data-binary @- https://your.server/path_to_cgi'

Reject the request immediately. The occurrence is notified by executing curl command.

Notes

You need to register either path to this program ( /usr/lib/ccs/ccs-notifyd ) or a domain for this program in /proc/ccs/manager before invoking this program if you set non-zero value for timeout.

Releases

2 releases since Debian 5.0 (Lenny); the text changed 1 time.

  1. 5.0
  2. 6.0

Authors

penguin-kernel _at_ I-love.SAKURA.ne.jp

From tomoyo-ccstools1.7 1.7.2-20100401-3 in Debian 6.0 (Squeeze). Parsed by carta from the page's man source.