How to display AppArmor denied messages as desktop notifications
This can be done with apparmor-notify
- Install it through
apt(sudo apt-get install apparmor-notify) - In
/etc/apparmor/notify.confchange the usergroup to 'adm' (all users using sudo are in this group) - add
aa-notify -pto your startup applications.
You can then test it by triggering a AppArmor Denied event with
sudo tcpdump -i eth0 -n -s 0 -w /foo