Novell LINUX ENTERPRISE DESKTOP 11, Руководство пользователя

Страница: 317 / 450

Select Enter
Allows access to the selected directory path.
Allow
Allows access to the specified directory path entries. AppArmor suggests
file permission access. For more information, refer to
Section 21.7, “File
Permission Access Modes” (page 249).
Deny
Prevents the program from accessing the specified directory path entries.
AppArmor then continues to the next event.
New
Prompts you to enter your own rule for this event, allowing you to
specify a regular expression. If the expression does not actually satisfy
the event that prompted the question in the first place, AppArmor asks
for confirmation and lets you reenter the expression.
Glob
Select a specific path or create a general rule using wild cards that match
a broader set of paths. To select any of the offered paths, enter the
number that is printed in front of the path then decide how to proceed
with the selected item.
For more information about globbing syntax, refer to Section 21.6, “Paths
and Globbing” (page 246).
Glob w/Ext
This modifies the original directory path while retaining the filename
extension. For example,
/etc/apache2/file.ext
becomes
/etc/
apache2/*.ext
, adding the wild card (asterisk) in place of the file-
name. This allows the program to access all files in the suggested direc-
tory that end with the
.ext
extension.
Abort
Aborts aa-logprof, losing all rule changes entered so far and leaving all
profiles unmodified.
Finish
Closes aa-logprof, saving all rule changes entered so far and modifying
all profiles.
Building Profiles from the Command Line 303