NAME

tomoyo-notifyd - policy violation notification daemon for TOMOYO Linux

SYNOPSIS

tomoyo-notifyd timeout action

DESCRIPTION

This program notifies the system administrator of policy violations that occur in domains set to enforcing mode.

The notification method can be any arbitrary command, such as sending mail. This makes it possible to be notified about policy violations as soon as possible, allowing subsequent action to be taken. You can freeze the program and hold for judgement by specifying the number of seconds to wait for when a violation occurs. However, you should login to the system and start tomoyo-queryd within this time, so that the request can be dealt with.

If you wish to freeze a process, you must register this program in /sys/kernel/security/tomoyo/manager.

EXAMPLES

Send mail notification and freeze the process for 180 seconds

  tomoyo-notifyd 180 'mail admin@example.com'

Reject the request immediately and send a notification via curl

  tomoyo-notifyd 0 'curl --data-binary @- https://your.server/path_to_cgi'

See the configuration file for more information about the syntax.

BUGS

If you find any bugs, send an email to <tomoyo-users_en@lists.sourceforge.net>.

AUTHORS