
35
Building Novell AppArmor Profiles With the YaST GUI
Figure 2:
The Learning Mode exception requires you to define exe-
cute permissions for an entry.
3.
LogProf begins suggesting directory path entries that have been
accessed by the application you are profiling (as seen in
Figure 1
)
or requiring you to define execute permissions for entries (as seen
in
Figure 2
).
For Figure 1:
Select the option that will satisfy that request by
choosing either a suggested
include
, a particular
globbed version
of the path, or the
actual path
name. All of these options are not
always available.
•
#include
: An include is the section of a Novell AppArmor pro-
file that refers to an
include file
. Include files procure access
permissions for programs. By using an include, you can give
the program access to directory paths or files that are also
required by other programs. Using includes can reduce the size
of
a
pr
of
i
l
e.
I
t
’
s
good
pr
act
i
ce
t
o
sel
ect
#i
ncl
udes
when
sug-
gested.
•
Globbed Version
: This is accessed by clicking the
Glob
but-
ton as described in the next step. For information on globbing
synt
ax,
r
ef
er
t
o
“
Path Names and Regular Expression