
used on your system for which the AppArmor tools should search profiles on the server.
url
holds the server URL and
preferred_user
tells the AppArmor tools to prefer
profiles created by the
novell
user. Those profiles were created, tested and approved
by members of the SUSE development team.
...
[repository]
distro
= opensuse10.3
url
= http://apparmor.opensuse.org/backend/api
preferred_user = novell
...
The
/etc/apparmor/repository.conf
file is created during the configuration
process with the AppArmor tools. It contains your authentication data and specifies
which actions to enable with regards to the profile repository. If you opt for profile
download and do not want to be able to upload your own profiles
enabled
is set to
yes
while
upload
is set to
no
.
[repository]
enabled = yes
upload = yes
user = tux
pass = XXXXX
Once initially configured through the AppArmor tools, the configuration can only be
changed manually.
22.2.2 Downloading a Profile
While creating a profile from scratch or updating an existing profile by processing reject
messages in the log, the AppArmor tools search the repository for a matching profile.
If the search is successful, the profile or the list of profiles is displayed and you can
view them and choose the one that best matches your setup. As soon as you have chosen
a profile, it gets copied to the local machine (to the
/etc/apparmor.d
directory)
and activated. Alternatively, you can choose to ignore the profile on the repository and
create your own one from scratch.
AppArmor Profile Repositories
263
Summary of Contents for LINUX ENTERPRISE DESKTOP 11
Page 1: ...SUSE Linux Enterprise Server www novell com 11 March 17 2009 Security Guide...
Page 9: ...32 7 Managing Audit Event Records Using Keys 433 33 Useful Resources 435...
Page 10: ......
Page 29: ...Part I Authentication...
Page 30: ......
Page 55: ...Figure 4 2 YaST LDAP Server Configuration LDAP A Directory Service 41...
Page 126: ......
Page 127: ...Part II Local Security...
Page 128: ......
Page 158: ......
Page 173: ...Part III Network Security...
Page 174: ......
Page 194: ......
Page 197: ...Figure 16 2 Scenario 2 Figure 16 3 Scenario 3 Configuring VPN Server 183...
Page 210: ......
Page 228: ......
Page 229: ...Part IV Confining Privileges with Novell AppArmor...
Page 230: ......
Page 274: ......
Page 300: ......
Page 328: ......
Page 340: ......
Page 342: ......
Page 386: ......
Page 387: ...Part V The Linux Audit Framework...
Page 388: ......