Novell APPARMOR 1.2, Руководство администратора, Страница: 33 / 130

Deny
Click Deny to prevent the program from accessing the specified directory
path entries.
Glob
Clicking this modifies the directory path (by using wild cards) to include all
files in the suggested entry directory. Double-clicking it grants access to all
files and subdirectories beneath the one shown.
For more information about globbing syntax, refer to Section 3.6, “Pathnames
and Globbing” (page 73).
Glob w/Ext
Modifies the original directory path while retaining the filename extension.
A single click causes
/etc/apache2/file.ext
to become
/etc/
apache2/*.ext
, adding the wild card (asterisk) in place of the file name.
This allows the program to access all files in the suggested directories that
end with the
.ext
extension. When you double-click it, access is granted
to all files (with the particular extension) and subdirectories beneath the one
shown.
Edit
Enables editing of the highlighted line. The new (edited) line appears at the
bottom of the list.
Abort
Aborts logprof, dumping all rule changes entered so far and leaving all pro-
files unmodified.
Finish
Closes logprof, saving all rule changes entered so far and modifying all
profiles.
Click Allow or Deny for each learning mode entry. These help build the Novell
AppArmor profile.
NOTE
The number of learning mode entries corresponds to the complexity of
the application.
Building Novell AppArmor Profiles 33