Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007, Installation Manual

Page: 888 / 982

Updates or modifications to the application profiles are only required if the software
configuration or the desired range of activities changes. AppArmor offers intuitive tools
to handle profile updates or modifications.
Users should not notice AppArmor at all. It runs “behind the scenes” and does not require
any user interaction. Performance is not affected noticeably by AppArmor. If some
activity of the application is not covered by an AppArmor profile or if some activity
of the application is prevented by AppArmor, the administrator needs to adjust the
profile of this application to cover this kind of behavior.
This guide outlines the basic tasks that need to be performed with AppArmor to effec-
tively harden a system. For more in-depth information, refer to Novell AppArmor Ad-
ministration Guide.
48.1 Installing Novell AppArmor
Novell AppArmor is installed and running by default on any installation of SUSE Linux
Enterprise® regardless of what patterns are installed. The packages listed below are
needed for a fully functional instance of AppArmor
•
apparmor-parser
•
libapparmor
•
apparmor-docs
•
yast2-apparmor
•
apparmor-profiles
•
apparmor-utils
•
audit
48.2 Enabling and Disabling Novell
AppArmor
Novell AppArmor is configured to run by default on any fresh installation of SUSE
Linux Enterprise. There are two ways of toggling the status of AppArmor:
870 Installation and Administration