
being supervised by genprof, this step can go on for days or weeks and can span
complete system reboots.
4
Analyze the log.
In systemic profiling, run logprof directly instead of letting
genprof run it (as in stand-alone profiling). The general form of logprof is:
logprof [ -d
/path/to/profiles
] [ -f
/path/to/logfile
]
Refer to
Section “logprof”
(page 65) for more information about using logprof.
5
Repeat Steps 3-4.
This generates optimum profiles. An iterative approach
captures smaller data sets that can be trained and reloaded into the policy engine.
Subsequent iterations generate fewer messages and run faster.
6
Edit the profiles.
You might want to review the profiles that have been gen-
erated. You can open and edit the profiles in
/etc/subdomain.d/
using
vim. For help using vim to its fullest capacity, refer to
Section “Subdomain.vim”
(page 71).
7
Return to “enforce” mode.
This is when the system goes back to enforcing
the rules of the profiles, not just logging information. This can be done manually
by removing the
flags=(complain)
text from the profiles or automatically
by using the enforce command, which works identically to the complain com-
mand, but sets the profiles to enforce mode.
To ensure that all profiles are taken out of complain mode and put into enforce
mode, enter
enforce /etc/subdomain.d/*
.
8
Rescan all profiles.
To have Novell AppArmor rescan all of the profiles and
change the enforcement mode in the kernel, enter
/etc/init.d/subdomain
restart
.
3.5.3 Summary of Profiling Tools
All of the Novell AppArmor profiling utilities are provided by the
subdomain-utils
RPM package and most are stored in
/usr/sbin
. The following sections introduce
each tool.
56
Содержание APPARMOR 1.2
Страница 1: ...Novell AppArmor Powered by Immunix Administration Guide www novell com 1 2 09 29 2005...
Страница 4: ......
Страница 14: ......
Страница 116: ......
Страница 128: ......