Novell APPARMOR 1.2, Administration Manual, Page: 54 / 130

6 Restart Novell AppArmor by entering
rcsubdomain restart
in a terminal
window.
3.5 Two Methods of Profiling
Given the syntax for Novell AppArmor profiles in Section 3.1, “Profile Components
and Syntax” (page 21), you could create profiles without using the tools. However, the
effort involved would be substantial. To avoid such a hassle, use the Novell AppArmor
tools to automate the creation and refinement of profiles.
There are two ways to approach creating Novell AppArmor profiles, along with tools
to support both methods.
Stand-Alone Profiling
A method suitable for profiling small applications that have a finite run time, such
as user client applications like mail clients. For more information, refer to
Sec-
tion 3.5.1, “Stand-Alone Profiling” (page 54).
Systemic Profiling
A method suitable for profiling large numbers of programs all at once and for
profiling applications that may run for days, weeks, or continuously across reboots,
such as network server applications like Web servers and mail servers. For more
information, refer to
Section 3.5.2, “Systemic Profiling” (page 55).
Automated profile development becomes more manageable with the Novell AppArmor
tools:
1
Decide which profiling method suits your needs.
2 Perform a static analysis. Run either genprof or autodep, depending on the pro-
filing method you have chosen.
3 Enable dynamic learning. Activate learning mode for all profiled programs.
3.5.1 Stand-Alone Profiling
Stand-alone profile generation and improvement is managed by a program called gen-
prof. This method is easy because genprof takes care of everything, but is limited because
54