
22
AppArmor Profile Repositories
AppArmor ships a set of profiles enabled by default and created by the AppArmor de-
velopers and kept under the
/etc/apparmor.d
. In addition to these profiles, SUSE
Linux Enterprise Server ships profiles for individual applications together with the re-
spective application. These profiles are not enabled by default and reside under another
directory than the standard AppArmor profiles,
/etc/apparmor/profiles/
extras
.
AppArmor also supports the use of an external profile repository. This repository is
maintained by Novell and allows you to download profiles generated by Novell and
other AppArmor users as well as uploading your own. Find the profile repository at
http://apparmor.opensuse.org
.
22.1 Using the Local Repository
The AppArmor tools, both YaST and aa-genprof and aa-logprof, support the use of a
local repository. Whenever you start to create a new profile from scratch and there al-
ready is one inactive profile in your local repository, you are asked whether you would
like to use the existing inactive one from
/etc/apparmor/profiles/extras
and whether you want to base your efforts on it. If you decide to use this profile, it gets
copied over to the directory of profiles enabled by default (
/etc/apparmor.d
) and
loaded whenever AppArmor is started. Any further further adjustments will be done to
the active profile under
/etc/apparmor.d
.
AppArmor Profile Repositories
261
Содержание LINUX ENTERPRISE DESKTOP 11
Страница 1: ...SUSE Linux Enterprise Server www novell com 11 March 17 2009 Security Guide...
Страница 9: ...32 7 Managing Audit Event Records Using Keys 433 33 Useful Resources 435...
Страница 10: ......
Страница 29: ...Part I Authentication...
Страница 30: ......
Страница 55: ...Figure 4 2 YaST LDAP Server Configuration LDAP A Directory Service 41...
Страница 126: ......
Страница 127: ...Part II Local Security...
Страница 128: ......
Страница 158: ......
Страница 173: ...Part III Network Security...
Страница 174: ......
Страница 194: ......
Страница 197: ...Figure 16 2 Scenario 2 Figure 16 3 Scenario 3 Configuring VPN Server 183...
Страница 210: ......
Страница 228: ......
Страница 229: ...Part IV Confining Privileges with Novell AppArmor...
Страница 230: ......
Страница 274: ......
Страница 300: ......
Страница 328: ......
Страница 340: ......
Страница 342: ......
Страница 386: ......
Страница 387: ...Part V The Linux Audit Framework...
Страница 388: ......