Novell APPARMOR 1.2, Administration Manual, Page: 52 / 130

You can use a text editor, such as vim, to access and make changes to these profiles.
The following options contain detailed steps for building profiles:
Adding or Creating Novell AppArmor Profiles
Refer to Section 3.4.3, “Adding or Creating a Novell AppArmor Profile” (page 52)
Editing Novell AppArmor Profiles
Refer to Section 3.4.4, “Editing a Novell AppArmor Profile” (page 53)
Deleting Novell AppArmor Profiles
Refer to Section 3.4.5, “Deleting a Novell AppArmor Profile” (page 53)
Use vim to view and edit your profile by typing vim at a terminal window. To enable
syntax coloring when you edit a Novell AppArmor profile in vim, use the commands
:syntax on
then
:set syntax=subdomain
. For more information about vim
and syntax coloring, refer to Section “Subdomain.vim” (page 71).
NOTE
After making changes to a profile, use the
rcsubdomain restart
command,
described in the previous section. This command causes the Novell AppArmor
to reread the profiles. For a detailed description of the syntax of these files,
refer to
Chapter 3, Building Novell AppArmor Profiles (page 21).
3.4.3 Adding or Creating a Novell
AppArmor Profile
To add or ceate a Novell AppArmor profile for an application, you can use a systemic
or stand-alone profiling method, depending on your needs.
Stand-Alone Profiling
Suitable for profiling small applications that have a finite run time, such as user
client applications like mail clients. Refer to
Section 3.5.1, “Stand-Alone Profiling”
(page 54).
Systemic Profiling
Suitable for profiling large numbers of programs all at once and for profiling appli-
cations that might run for days, weeks, or continuously across reboots, such as
52