AA-NOTIFY(8)                       AppArmor                       AA-NOTIFY(8)


<?><?><?> (NAME)
       aa-notify - <?><?><?><?><?> <?><?><?><?><?><?><?><?><?>
       <?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?> AppArmor

<?><?><?><?><?> <?><?><?><?><?> (SYNOPSIS)
       aa-notify [<?><?><?><?><?>]

<?><?><?><?><?><?><?> (DESCRIPTION)
       <?><?><?><?><?> aa-notify <?><?><?><?><?><?><?><?> <?><?>
       <?><?><?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?><?> <?><?>
       <?><?><?><?> <?><?><?><?><?><?><?><?> DENIED (<?><?> <?><?><?>)
       AppArmor <?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?><?><?>.

<?><?><?><?><?><?><?><?> (OPTIONS)
       <?><?><?><?><?> aa-notify <?><?><?><?><?><?><?><?><?><?><?> <?><?><?>
       <?><?> <?><?><?><?><?><?><?><?>:

       -p, --poll
           <?><?><?><?><?> <?><?><?><?><?> (poll) <?><?><?><?><?><?><?>
           AppArmor <?> <?><?><?><?><?> <?><?><?><?><?><?><?><?><?>
           <?><?><?><?><?><?>. <?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?>
           <?><?><?><?><?> '-s' <?><?><?><?> <?><?><?><?><?> <?><?><?><?><?>
           <?><?> <?><?><?><?> <?><?><?><?><?><?><?><?><?><?>
           <?><?><?><?><?><?><?> <?><?><?>.

       --display $DISPLAY
           <?><?><?><?><?> <?><?><?><?><?> <?><?><?><?><?> DISPLAY <?><?><?>
           $DISPLAY (<?><?> <?><?><?><?><?> <?><?> sudo <?><?><?><?><?>
           $DISPLAY <?><?> <?><?><?><?><?><?><?><?> <?><?><?> <?><?><?><?>
           <?><?><?> <?><?><?><?> <?><?><?><?>).

       -f FILE, --file=FILE
           <?><?><?><?><?><?> FILE <?><?><?><?> <?><?><?><?><?>
           <?><?><?><?><?><?><?><?> AppArmor.

       -l, --since-last
           <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?> <?><?><?><?><?>
           <?><?><?><?> <?><?> <?><?><?><?><?>.

       -s NUM, --since-days=NUM
           <?><?><?><?><?> <?><?><?><?><?> <?><?><?><?> NUM <?><?><?>
           <?><?><?><?><?>.

       -u USER, --user=USER
           <?><?><?><?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?>
           <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?><?><?><?>
           <?><?> <?><?> <?><?><?><?> <?><?><?><?><?><?><?>. <?><?><?><?><?>
           <?><?><?><?><?><?><?> <?><?> <?><?><?><?><?> -p<?> <?><?><?>
           <?><?><?><?><?> <?><?><?><?> <?><?><?> <?><?><?><?><?><?>
           <?><?><?><?><?> <?><?><?> <?><?> <?><?><?><?><?><?><?><?><?>
           <?><?><?><?><?><?> <?><?> <?><?><?><?><?><?> <?><?><?><?><?>
           <?><?><?>. <?><?><?> <?><?><?><?><?> <?><?><?><?><?> <?><?><?><?>
           <?><?><?> sudo <?><?><?> <?><?><?><?> <?><?><?><?><?>.

       -w NUM, --wait=NUM
           <?><?><?> <?><?><?><?> <?><?> <?><?><?> NUM <?><?><?><?><?>
           <?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?><?><?><?>
           (<?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?> <?><?> -p).

       -v, --verbose
           <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?> <?><?><?><?><?>
           <?><?><?><?><?><?><?><?> <?><?> <?><?><?><?><?><?> <?><?><?><?><?>.

       -h, --help
           <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?>
           <?><?><?><?><?><?><?>.

<?><?><?><?><?><?><?><?> (CONFIGURATION)
       <?><?><?><?><?><?><?><?> <?><?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?> aa-notify <?><?> <?><?><?><?> <?><?><?><?>
       /etc/apparmor/notify.conf <?><?><?><?><?> <?><?><?><?><?><?>:

         # Set to 'no' to disable AppArmor notifications globally
         show_notifications="yes"

         # Special profiles used to remove privileges for unconfined binaries using user namespaces. If unsure, leave as is.
         userns_special_profiles="unconfined,unprivileged_userns"

         # Theme for aa-notify GUI. See https://ttkthemes.readthedocs.io/en/latest/themes.html for available themes.
         interface_theme="ubuntu"

         # Binaries for which we ignore userns-related capability denials
         ignore_denied_capability="sudo,su"

         # OPTIONAL - kind of operations which display a popup prompt.
         prompt_filter="userns"

         # OPTIONAL - restrict using aa-notify to users in the given group
         # (if not set, everybody who has permissions to read the logfile can use it)
         # use_group="admin"

         # OPTIONAL - custom notification message body
         message_body="This is a custom notification message."

         # OPTIONAL - custom notification message footer
         message_footer="For more information visit https://foo.com"

         # OPTIONAL - custom notification filtering
         # Filters are used to reduce the output of information to only those entries that will match the filter. Filters use Python's regular expression syntax.
         filter.profile="^(foo|bar)$"  # Match the profile:            Only shows notifications for profiles "foo" or "bar"
         filter.operation="^open$"     # Match the operation:          Only shows notifications for "open" operation
         filter.name="^(?!/usr/lib/)"  # Match the name:               Excludes notifications for names starting by "/usr/lib/"
         filter.denied="^r$"           # Match the denied_mask:        Only shows notifications where "r", and only "r", was denied
         filter.family="^inet$"        # Match the network family:     Only shows notifications for "inet" family
         filter.socket="stream"        # Match the network socket type: Only shows notifications for "stream" sockets

       <?><?><?><?><?><?><?><?> <?><?><?><?> <?><?> <?><?><?><?><?> <?><?>
       <?><?><?><?> $XDG_CONFIG_HOME/apparmor/notify.conf (<?><?> <?><?><?><?>
       <?><?><?><?><?><?><?><?><?> ~/.apparmor/notify.conf <?><?> <?><?><?><?>
       <?><?><?><?>) <?><?><?><?><?> <?><?><?><?><?><?>:

         # set to 'yes' to enable AppArmor DENIED notifications
         show_notifications="yes"

<?><?><?><?><?><?><?> (BUGS)
       <?><?><?><?><?> aa-notify <?><?><?><?> <?><?><?><?><?><?>
       <?><?><?><?><?><?><?><?> <?><?><?> <?><?><?><?>
       <?><?><?><?><?><?><?><?> DENIED <?><?><?><?><?> <?><?> AppArmor <?><?>
       <?><?><?><?><?><?>.

       <?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?>
       <?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?>
       <?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?>:
       <https://gitlab.com/apparmor/apparmor/-/issues>

<?><?><?><?><?><?> <?><?><?><?><?><?> (SEE ALSO)
       apparmor(7)

AppArmor 4.1.7                    2026-03-10                      AA-NOTIFY(8)