
User
’
s
Gui
de
50
3.
To go to the Novell AppArmor directory, type
cd /etc/subdo-
main.d/
.
4.
Type
ls
to view all the Novell AppArmor profiles that are currently
installed.
5.
Delete the profile exiting profile by typing
rm
profilename
.
6.
Restart Novell AppArmor by typing
/etc/init.d/subdomain
restart
in a terminal window.
Two Methods of Profiling
Gi
ven
t
he
synt
ax
f
or
Novel
l
AppAr
mor
pr
of
i
l
es
i
n
“
Profile Components
and Syntax
”
on
page17,
one
could
create profiles without using the
tools. However, the effort involved would be substantial. To avoid such
a hassle, use the Novell AppArmor tools to automate the creation and
refinement of profiles.
There are two ways to approach creating Novell AppArmor profiles,
along with tools to support both methods.
•
A
standalone method
(
f
or
mor
e
i
nf
or
mat
i
on,
r
ef
er
t
o
“
Standalone
Profiling
”
on
page50)
,
sui
t
abl
e
f
or
pr
of
i
l
i
ng
smal
l
appl
i
cat
i
ons
t
hat
have a finite run time, such as user client applications like mail cli-
ents.
•
A
systemic method
(
f
or
mor
e
i
nf
or
mat
i
on,
r
ef
er
t
o
“
Systemic Profil-
ing
”
on
page51)
,
sui
t
abl
e
f
or
pr
of
i
l
i
ng
l
ar
ge
number
s
of
pr
ogr
ams
al
l
at once, and for profiling applications that may run for days, weeks,
or continuously across reboots, such as network server applications
like web servers and mail servers.
Automated profile development becomes more manageable with the
Novell security tools:
1. Decide which profiling method suits your needs.
2. Perform a static analysis.
Run either genprof or autodep, depend-
ing on the profiling method you have chosen.
3. Enable dynamic learning.
Activate
learning
mode for all profiled
programs.
Standalone Profiling
Standalone profile generation and improvement is managed by a