Globbed Version
Accessed by clicking Glob. For information about globbing syntax,
refer to
Section 2.1.2, “Paths and Globbing”
(page 15).
Actual Pathname
Literal path that the program needs to access to run properly.
After selecting a directory path, process it as an entry to the Novell App-
Armor profile by clicking Allow or Deny. If you are not satisfied with the
directory path entry as it is displayed, you can also Glob or Edit it.
The following options are available to process the learning mode entries
and build the profile:
Allow
Grant the program access to the specified directory path entries. The
Add Profile Wizard suggests file permission access. For more infor-
mation about this, refer to
Section 2.1.3, “File Permission Access
Modes”
(page 17).
Deny
Click Deny to prevent the program from accessing the specified paths.
Glob
Clicking this modifies the directory path (using wild cards) to include
all files in the suggested directory. Double-clicking it grants access
to all files and subdirectories beneath the one shown. For more infor-
mation about globbing syntax, refer to
Section 2.1.2, “Paths and
Globbing”
(page 15).
Glob w/Ext
Modify the original directory path while retaining the filename exten-
sion. A single click causes
/etc/apache2/file.ext
to become
/etc/apache2/*.ext
, adding the wild card (asterisk) in place
of the filename. This allows the program to access all files in the
suggested directories that end with the
.ext
extension. When you
double-click it, access is granted to all files with the particular exten-
sion and subdirectories beneath the one shown.
34
Novell AppArmor Administration Guide
