quires you to define execute permissions for entries (as seen in
Figure 3.2,
“Learning Mode Exception: Defining Execute Permissions for an Entry”
(page 28)).
• For
Figure 3.1: Learning Mode Exception: Controlling Access to Specific
Resources
: From the following options, select the one that satisfies the request
for access, which could be a suggested include, a particular globbed version
of the path, or the actual pathname. Note that all of these options are not al-
ways available.
#include
The section of a Novell AppArmor profile that refers to an include file.
Include files give access permissions for programs. By using an include,
you can give the program access to directory paths or files that are also
required by other programs. Using includes can reduce the size of a
profile. It is good practice to select includes when suggested.
Globbed Version
Accessed by clicking Glob. For information about globbing syntax, refer
to
Section 4.7, “Pathnames and Globbing”
(page 68).
Actual Pathname
Literal path that the program needs to access to run properly.
After you select a directory path, process it as an entry into the Novell App-
Armor profile by clicking Allow or Deny. If you are not satisfied with the
directory path entry as it is displayed, you can also Glob or Edit it.
The following options are available to process the learning mode entries and
build the profile:
Allow
Grant the program access to the specified directory path entries. The
Add Profile Wizard suggests file permission access. For more information
about this, refer to
Section 4.8, “File Permission Access Modes”
(page 69).
Deny
Click Deny to prevent the program from accessing the specified paths.
Building and Managing Profiles With YaST
29
