63
Two Methods of Profiling
that any changes to DNS configuration and the associated nameser-
vice profile package can be made once, rather than needing to revise
many profiles.
Keystroke responses to this question are:
•
Press Enter:
Accepts the entry highlighted with []. Press the
Enter
key if you want to allow access to the selected directory path.
•
"A"llow:
Select Allow if you want to grant the program access to
the specified directory path entries. Novell AppArmor suggests file
per
mi
ssi
on
access.
For
mor
e
i
nf
or
mat
i
on
on
t
hi
s,
r
ef
er
t
o
“
File Per-
mission Access Modes
”
on
page69
•
"D"eny:
Select Deny to prevent the program from accessing the
specified directory path entries. Novell AppArmor will then move
on to the next event.
•
“N”ew:
Prompts you to enter your own rule for this event, allow-
ing you to specify whatever form of regular expression you want. If
the expression you enter does not actually satisfy the event that
prompted the question in the first place, Novell AppArmor will ask
you for confirmation and let you re-enter the expression.
•
"G"lob:
Select Glob once once to modify the directory path (by
using wildcards) to include all files in the suggested entry directory.
When you select Glob twice, access will be granted to all files and
subdirectories beneath the one shown.
For
mor
e
i
nf
or
mat
i
on
on
gl
obbi
ng
synt
ax,
r
ef
er
t
o
“
Path Names and
Regular Expression Matching
”
on
page69.
•
Gl
ob
w/
"E"xt
:
When you select Glob w/Ext, the original directory
Profile:
/usr/sbin/
httpd2-prefork
Path:
/etc/group
New Mode: r
[1 - #include <abstractions/nameservice>]
2 - /etc/group
[(A)llow] / (D)eny / (N)ew / (G)lob / Glob w/(E)xt /
Abo(r)t / (F)inish
