Novell APPARMOR 1.2, Administration Manual, Page: 63 / 130

unconfined (ux)
The child runs completely unconfined without any Novell AppArmor profile
being applied to the executed resource.
Example 3.2 Learning Mode Exception: Defining Execute Permissions for an Entry
Adding /bin/ps ix to profile.
Profile: /usr/sbin/xinetd
Path: /etc/hosts.allow
New Mode: r
[1 - /etc/hosts.allow]
[(A)llow] / (D)eny / (N)ew / (G)lob / Glob w/(E)xt / Abo(r)t / (F)inish
The above menu shows Novell AppArmor suggesting directory path entries that
have been accessed by the application you are profiling. It might also require
you to define execute permissions for entries.
Novell AppArmor provides one or more pathnames or includes. By clicking the
option number, select from one or more of the following options, then proceed
to the next step.
NOTE
All of these options are not always presented in the Novell AppArmor
menu.
#include
This is the section of a Novell AppArmor profile that refers to an include
file, which procures access permissions for programs. By using an include,
you can give the program access to directory paths or files that are also re-
quired by other programs. Using includes can reduce the size of a profile. It
is good practice to select includes when suggested.
Globbed Version
This is accessed by clicking Glob as described in the next step. For informa-
tion about globbing syntax, refer to
Section 3.6, “Pathnames and Globbing”
(page 73).
Building Novell AppArmor Profiles 63