Novell APPARMOR 1.2, Administration Manual, Page: 46 / 130

Deny
Click Deny to prevent the program from accessing the specified directory
path entries.
Glob
Clicking this modifies the directory path (by using wild cards) to include all
files in the suggested entry directory. Double-clicking it grants access to all
files and subdirectories beneath the one shown.
For more information about globbing syntax, refer to Section 3.6, “Pathnames
and Globbing” (page 73).
Glob w/Ext
Modify the original directory path while retaining the filename extension.
A single click causes
/etc/apache2/file.ext
to become
/etc/
apache2/*.ext
, adding the wild card (asterisk) in place of the filename.
This allows the program to access all files in the suggested directories that
end with the
.ext
extension. When you double-click it, access is granted
to all files (with the particular extension) and subdirectories beneath the one
shown.
Edit
Enable editing of the highlighted line. The new (edited) line appears at the
bottom of the list.
Abort
Abort logprof, dumping all rule changes entered so far and leaving all profiles
unmodified.
Finish
Close logprof, saving all rule changes entered so far and modifying all pro-
files.
Click Allow or Deny for each learning mode entry. These help build the Novell
AppArmor profile.
NOTE
The number of learning mode entries corresponds to the complexity of
the application.
46