Figure 3.3
Learning Mode Exception: Defining Execute Permissions for an Entry
10
The Add Profile Wizard begins suggesting directory path entries that have
been accessed by the application profiled (as seen in
Figure 3.2, “Learning
Mode Exception: Controlling Access to Specific Resources”
(page 32)) or
requires you to define execute permissions for entries (as seen in
Figure 3.3,
“Learning Mode Exception: Defining Execute Permissions for an Entry”
(page 33)).
• For
Figure 3.2: Learning Mode Exception: Controlling Access to Specific
Resources
: Select the option that satisfies the request for access, which
could be a suggested include, a particular globbed version of the path, or
the actual pathname. Depending on the situation, these options are avail-
able:
#include
The section of a Novell AppArmor profile that refers to an include
file. Include files give access permissions for programs. By using an
include, you can give the program access to directory paths or files
that are also required by other programs. Using includes can reduce
the size of a profile. It is good practice to select includes when sug-
gested.
Building and Managing Profiles with YaST
33
