User
’
s
Gui
de
48
point where logins are no longer possible (for example, by breaking the
profile associated with the SSH daemon) you can repair the damage
using your running
root
prompt, and restarting the SubDomain mod-
ule.
Building Novell AppArmor Profiles
the SubDomain module profile definitions are stored in the directory
/etc/subdomain.d
/ as plain text files.
Warning!
All files in the /etc/subdomain.d/ directory are interpreted
as profiles. Renaming files in that directory is not an effective way of
preventing profiles from being loaded. You must remove profiles from
this directory to manage them effectively.
having it be loaded is not an effective manner of managing profiles
You can use a text editor, such as
vim
, to access and make changes
to these profiles. The following options contain detailed steps for build-
ing profiles:
•
Add or Create Novell AppArmor Profiles:
Ref
er
t
o
“
Add or Create
a Novell AppArmor Profile
”
on
page49
•
Edit Novell AppArmor Profile:
Ref
er
t
o
“
Edit Novell AppArmor
Profile
”
on
page49
•
Delete a Novell AppArmor Profile:
Ref
er
t
o
“
Delete Novell AppAr-
mor Profile.
”
on
page49
Use
vim
to view and edit your profile by typing
vim
at a terminal win-
dow. To enable the syntax coloring, when you edit a Novell AppArmor
pr
of
i
l
e
i
n
vi
m,
use
t
he
command
“
:syntax on
”
and
t
hen
“
:set syn-
tax=subdomain
”
.
For
mor
e
i
nf
or
mat
i
onon
vim
and syntax coloring,
r
ef
er
t
o
“
Subdomain.vim
”
on
page67.
Note:
After making changes to a profile, use the
/etc/init.d/sub-
domain restart
command, described in the previous section. This
command causes the Novell AppArmor to re-read the profiles. For a
det
ai
l
ed
descr
i
pt
i
on
of
t
he
synt
ax
of
t
hese
f
i
l
es,
r
ef
er
t
o
“
How to Build
Novell AppArmor Profiles
”
on
page17.
