Novell APPARMOR 1.2, Руководство администратора, Страница: 30 / 130

• A resource is requested by a profiled program that is not in the profile (see
Figure 3.1, “Learning Mode Exception: Controlling Access to Specific Re-
sources”
(page 30)). The learning mode exception requires you to allow or
deny access to a specific resource.
• A program is executed by the profiled program and the security domain
transition has not been defined (see Figure 3.2, “Learning Mode Exception:
Defining Execute Permissions for an Entry” (page 31)). The learning mode
exception requires you to define execute permissions for an entry.
Each of these cases results in a series of questions that you must answer to add
the resource to the profile or to add the program into the profile. The following
two figures show an example of each case. Subsequent steps describe your options
in answering these questions.
The AppArmor Profiling Wizard window opens.
Figure 3.1 Learning Mode Exception: Controlling Access to Specific Resources
30