Novell APPARMOR 1.2, Administration Manual, Page: 23 / 130

accessible and, in all cases, Novell AppArmor confinement restricts the damage that
the attacker can do to the set of files permitted by Novell AppArmor.
3.1.2 #include
#include
statements are directives that pull in components of other Novell AppArmor
profiles to simplify profiles. Include files fetch access permissions for programs. By
using an include, you can give the program access to directory paths or files that are
also required by other programs. Using includes can reduce the size of a profile.
By default, the
#include
statement appends
/etc/subdomain.d/
, which is
where it expects to find the include file, to the beginning of the pathname. Unlike other
profile statements (but similar to C programs),
#include
lines do not end with a
comma.
To assist you in profiling your applications, Novell AppArmor provides two classes of
#include
s, abstractions, and program chunks.
Abstractions
Abstractions are
#include
s that are grouped by common application tasks. These
tasks include access to authentication mechanisms, access to name service routines,
common graphics requirements, and system accounting. Files listed in these abstractions
are specific to the named task; programs that require one of these files usually require
some of the other files listed in the abstraction file (depending on the local configuration
as well as the specific requirements of the program). Abstractions can be found in
/etc/subdomain.d/abstractions/
.
Program Chunks
Program chunks are access controls for specific programs that a system administrator
might want to control based on local site policy. Each chunk is used by a single program.
These are provided to ease local-site modifications to policy and updates to policy
provided by Novell AppArmor. Administrators can modify policy in these files to suit
their own needs and leave the program profiles unmodified, simplifying the task of
merging policy updates from Novell AppArmor into enforced policy at each site.
Building Novell AppArmor Profiles 23