Novell APPARMOR 1.2, Administration Manual, Page: 43 / 130

• A resource is requested by a profiled program that is not in the profile (see
Figure 3.4, “Learning Mode Exception: Controlling Access to Specific Re-
sources”
(page 43)).
• A program is executed by the profiled program and the security domain
transition has not been defined (see Figure 3.5, “Learning Mode Exception:
Defining Execute Permissions for an Entry” (page 44)).
Each of these cases results in a question that you must answer that enables you
to add the resource or program into the profile. The following two figures show
an example of each case. Subsequent steps describe your options in answering
these questions.
Figure 3.4 Learning Mode Exception: Controlling Access to Specific Resources
Building Novell AppArmor Profiles 43