2.5.1 Setting up Profile Repository Support
Once properly configured, both the YaST and the command line tools support the use
of an external profile repository. The initial configuration takes place when you start
the YaST Add Profile Wizard, the Update Profile Wizard, aa-genprof, or aa-logprof to
create or update a profile that already exists on the repository server:
1
Determine whether to use or not to use the profile repository at all.
2
Enable the repository for profile downloads.
3
Once you have created or modified a profile, determine whether the tools should
be able to upload your profile to the repository.
If you chose to upload profiles to the repository, enter your credentials for the
repository server.
The configuration of the repository is done by editing two configuration files,
/etc/
apparmor/logprof.conf
and
/etc/apparmor/respository.conf
.
The
/etc/apparmor/logprof.conf
file contains a section called
[repository]
.
distro
determines the version of openSUSE used on your system
for which the AppArmor tools should search profiles on the server.
url
holds the
server URL and
preferred_user
tells the AppArmor tools to prefer profiles created
by the
novell
user. Those profiles were created, tested and approved by members of
the SUSE development team.
...
[repository]
distro = opensuse10.3
url = http://apparmor.opensuse.org/backend/api
preferred_user = novell
...
The
/etc/apparmor/repository.conf
file is created during the configuration
process with the AppArmor tools. It contains your authentication data and specifies
which actions to enable with regards to the profile repository. If you opt for profile
download and do not want to be able to upload your own profiles
enabled
is set to
yes
while
upload
is set to
no
.
[repository]
24
Novell AppArmor Administration Guide
