Novell LINUX ENTERPRISE DESKTOP 11, Руководство пользователя

Страница: 285 / 450

Figure 23.3 Learning Mode Exception: Defining Execute Permissions for an Entry
10 The Add Profile Wizard begins suggesting directory path entries that have
been accessed by the application profiled (as seen in
Figure 23.2, “Learning
Mode Exception: Controlling Access to Specific Resources” (page 270)) or
requires you to define execute permissions for entries (as seen in Figure 23.3,
“Learning Mode Exception: Defining Execute Permissions for an Entry”
(page 271)).
• For Figure 23.2: Learning Mode Exception: Controlling Access to Specific
Resources : Select the option that satisfies the request for access, which
could be a suggested include, a particular globbed version of the path, or
the actual pathname. Depending on the situation, these options are avail-
able:
#include
The section of a Novell AppArmor profile that refers to an include
file. Include files give access permissions for programs. By using an
include, you can give the program access to directory paths or files
that are also required by other programs. Using includes can reduce
the size of a profile. It is good practice to select includes when sug-
gested.
Building and Managing Profiles with YaST 271