AppArmor provides one or more paths or includes. By entering the option
number, select the desired options then proceed to the next step.
NOTE
All of these options are not always presented in the AppArmor menu.
#include
This is the section of an AppArmor profile that refers to an include file,
which procures access permissions for programs. By using an include,
you can give the program access to directory paths or files that are also
required by other programs. Using includes can reduce the size of a
profile. It is good practice to select includes when suggested.
Globbed Version
This is accessed by selecting Glob as described in the next step. For in-
formation about globbing syntax, refer to
Section 2.1.2, “Paths and
Globbing”
(page 15).
Actual Path
This is the literal path to which the program needs access so that it can
run properly.
After you select the path or include, process it as an entry into the AppArmor
profile by selecting Allow or Deny. If you are not satisfied with the directory
path entry as it is displayed, you can also Glob it.
The following options are available to process the learning mode entries and
build the profile:
Select
Enter
Allows access to the selected directory path.
Allow
Allows access to the specified directory path entries. AppArmor suggests
file permission access. For more information, refer to
Section 2.1.3, “File
Permission Access Modes”
(page 17).
Deny
Prevents the program from accessing the specified directory path entries.
AppArmor then continues to the next event.
64
Novell AppArmor Administration Guide
