ccs-notifyd8
Notify tomoyo linux's policy violation
Usage
ccs-notifyd timeout
action
Overview
This program detects policy violation in enforcing mode and notify users (e.g. send a mail). You can know the first occurence of policy violation in enforcing mode as soon as possible. You may use this program for holding your judgement of the request that violates policy in enforcing mode provided that you can login to the system and start "ccs-queryd" command for responding within timeout seconds.
Examples
# ccs-notifyd 180 'mail [email protected]'
-
Wait for 180 seconds before rejecting the request. The occurrence is notified by sending mail to [email protected] (if SMTP service is available).
# ccs-notifyd 0 'curl --data-binary @- https://your.server/path_to_cgi'
-
Reject the request immediately. The occurrence is notified by executing curl command.
Notes
You need to register either path to this program ( /usr/lib/ccs/ccs-notifyd ) or a domain for this program in /proc/ccs/manager before invoking this program if you set non-zero value for timeout.
Releases
2 releases since Debian 5.0 (Lenny); the text changed 1 time.