Novell APPARMOR 1.2, Руководство администратора, Страница: 31 / 130

Figure 3.2 Learning Mode Exception: Defining Execute Permissions for an Entry
8
The Add Profile Wizard begins suggesting directory path entries that have been
accessed by the application you are profiling (as seen in
Figure 3.1, “Learning
Mode Exception: Controlling Access to Specific Resources” (page 30)) or requir-
ing you to define execute permissions for entries (as seen in Figure 3.2, “Learning
Mode Exception: Defining Execute Permissions for an Entry” (page 31)).
a For Figure 3.1, “Learning Mode Exception: Controlling Access to Specific
Resources” : From the following options, select the one that satisfies the re-
quest for access, which could be a suggested include, a particular globbed
version of the path, or the actual pathname. Note that all of these options
are not always available.
#include
The section of a Novell AppArmor profile that refers to an include file.
Include files procure access permissions for programs. By using an in-
clude, you can give the program access to directory paths or files that
are also required by other programs. Using includes can reduce the size
of a profile. It is good practice to select includes when suggested.
Building Novell AppArmor Profiles 31