Novell APPARMOR 1.2, Руководство администратора, Страница: 72 / 130

Red background
Syntax errors that are not loading properly into the SubDomain modules
NOTE
There is a security risk when using these lines in your
.vimrc
file, because it
causes vim to trust the syntax mode presented in files you are editing. It might
enable an attacker to send you a file to open with vim that might do something
unsafe.
Use the
subdomain.vim
and
vim
man pages and the
:help
syntax from within
the vim editor for further vim help about syntax highlighting. The Novell AppArmor
syntax is stored in
/usr/share/vim/current/syntax/subdomain.vim.
Unconfined
The
unconfined
command examines open network ports on your system, compares
that to the set of profiles loaded on your system, and reports network services that do
not have Novell AppArmor profiles. It requires root privilege and that it not be confined
by a Novell AppArmor profile.
unconfined must be run as root to retrieve the process executable link from the proc
file system. This program is susceptible to the following race conditions:
• An unlinked executable is mishandled
• An executable started before a Novell AppArmor profile is loaded does not appear
in the output, despite running without confinement
• A process that dies between
netstat(8)
and further checks is mishandled
NOTE
This program lists processes using TCP and UDP only. In short, this program is
unsuitable for forensics use and is provided only as an aid to profiling all net-
work-accessible processes in the lab.
For more information about the science and security of Novell AppArmor, refer to the
following papers:
72