Contents
About This Guide
v
1 Immunizing Programs
9
1.1
Introducing the AppArmor Framework . . . . . . . . . . . . . . . .
10
1.2
Determining Programs to Immunize . . . . . . . . . . . . . . . . .
12
1.3
Immunizing Cron Jobs . . . . . . . . . . . . . . . . . . . . . . .
13
1.4
Immunizing Network Applications . . . . . . . . . . . . . . . . . .
13
2 Profile Components and Syntax
19
2.1
Breaking a Novell AppArmor Profile into Its Parts . . . . . . . . . . .
19
2.2
#include
Statements . . . . . . . . . . . . . . . . . . . . . .
21
2.3
Capability Entries (POSIX.1e) . . . . . . . . . . . . . . . . . . . .
22
3 Building and Managing Profiles With YaST
23
3.1
Adding a Profile Using the Wizard . . . . . . . . . . . . . . . . . .
25
3.2
Manually Adding a Profile . . . . . . . . . . . . . . . . . . . . .
32
3.3
Editing Profiles . . . . . . . . . . . . . . . . . . . . . . . . . .
33
3.4
Deleting a Profile . . . . . . . . . . . . . . . . . . . . . . . . .
38
3.5
Updating Profiles from Log Entries . . . . . . . . . . . . . . . . . .
39
3.6
Managing Novell AppArmor and Security Event Status . . . . . . . . .
40
4 Building Profiles via the Command Line
45
4.1
Checking the AppArmor Module Status . . . . . . . . . . . . . . .
45
4.2
Building Novell AppArmor Profiles . . . . . . . . . . . . . . . . . .
47
4.3
Adding or Creating a Novell AppArmor Profile . . . . . . . . . . . .
48
4.4
Editing a Novell AppArmor Profile . . . . . . . . . . . . . . . . . .
48
