Novell APPARMOR 1.2, Руководство администратора, Страница: 25 / 130

3.2.2 Using YaST ncurses
YaST ncurses can be used for building and managing Novell AppArmor profiles and
is better suited for users with limited bandwidth connections to their server. Access
YaST ncurses by typing
yast
while logged in to a terminal window or console as root.
YaST ncurses has the same features as the YaST GUI.
Refer to the instructions in Section 3.3, “Building Novell AppArmor Profiles with the
YaST GUI” (page 26) to build and manage Novell AppArmor profiles in YaST
ncurses, but be aware that the screens look different but function similarly.
3.2.3 Using the Command Line Interface
The command line interface requires knowledge of Linux commands and using terminal
windows. To use the command line interface for building and managing Novell App-
Armor profiles, refer to
Section 3.4, “Building Novell AppArmor Profiles Using the
Command Line Interface” (page 49).
The command line interface offers access to a few tools that are not available using the
other Novell AppArmor managing methods:
complain
Sets profiles into complain mode. Set it back to enforce mode when you want the
system to begin enforcing the rules of the profiles, not just logging information.
For more information about this tool, refer to
Section “Complain or Learning Mode”
(page 58).
enforce
Sets profiles back to enforce mode and the system begins enforcing the rules of
the profiles, not just logging information. For more information about this tool,
refer to
Section “Enforce Mode” (page 59).
unconfined
Performs a server audit to find processes that are running and listening for network
connections then reports whether they are profiled.
autodep
Generates a profile skeleton for a program and loads it into the Novell AppArmor
module in complain mode.
Building Novell AppArmor Profiles 25