Novell LINUX ENTERPRISE DESKTOP 11, Manual

Page: 235 / 450

To disable AppArmor permanently by removing it from the sequence of scripts executed
on system boot, proceed as follows:
1 Start YaST.
2
Select System > System Services (Runlevel).
3 Select Expert Mode.
4
Select
boot.apparmor
and click Set/Reset > Disable the service.
5 Exit the YaST Runlevel tool with Finish.
AppArmor will not be initialized on the next system boot and stays inactive until you
explicitly reenable it. Reenabling a service using the YaST Runlevel tool is similar to
disabling it.
Toggle the status of AppArmor in a running system by using the AppArmor Control
Panel. These changes take effect as soon as you apply them and survive a reboot of the
system. To toggle AppArmor's status, proceed as follows:
1 Start YaST.
2 Select Novell AppArmor > AppArmor Control Panel.
3 Select Enable AppArmor. To disable AppArmor, uncheck this option.
4 Exit the AppArmor Control Panel with Done.
19.3 Choosing the Applications to
Profile
You only need to protect the programs that are exposed to attacks in your particular
setup, so only use profiles for those applications you really run. Use the following list
to determine the most likely candidates:
Getting Started 221