Novell APPARMOR 1.2, Administration Manual, Page: 111 / 130

Example 5.1 Example phpsysinfo-dev Hat
^phpsysinfo {
#include <program-chunks/base-files>
/bin/df ix,
/bin/bash ix,
/dev/tty rw,
/etc/SuSE-release r,
/etc/fstab r,
/etc/hosts r,
/etc/mtab r,
/proc/** r,
/sbin/lspci ix,
/srv/www/htdocs/sysinfo/** r,
/sys/bus/pci/devices r,
/sys/devices/** r,
/usr/bin/who ix,
/usr/share/pci.ids r,
/var/log/apache2/{access,error}_log w,
/var/run/utmp r,
}
NOTE
The profile,
^phpsysinfo-dev
, is only valid in the context of a process run-
ning under the parent profile
httpd2-prefork
.
5.1.2 Adding Hats and Entries to Hats
When you use the Edit Profile dialog (for instructions, refer to Section 3.3.3, “Editing
a Profile” (page 39)) or when you add a new profile using Manually Add Novell App-
Armor Profile (for instructions, refer to Section 3.3.2, “Manually Adding a Profile”
(page 34)), you are given the option of adding hats (subprofiles) to your Novell App-
Armor profiles.
You can add a ChangeHat subprofile from the AppArmor Profile Dialog window.
Profiling Your Web Applications Using ChangeHat Apache 111