Novell APPARMOR 2.1 Administration Manual

Also see for APPARMOR 2.1 -: Quick start

Contents

Novell APPARMOR 2.1 Administration Manual Manual pdf 33 page image

enabled = yesupload = yesuser = tuxpass = XXXXXOnce initially configured through the AppArmor tools, the configuration can only bechanged manually.2.5.2 Downloading a ProfileWhile creating a profile from scratch or updating an existing profile by processing rejectmessages in the log, the AppArmor tools search the repository for a matching profile.If the search is successful, the profile or the list of profiles is displayed and you canview them and choose the one that best matches your setup. As soon as you have chosena profile, it gets copied to the local machine (to the /etc/apparmor.d directory)and activated. Alternatively, you can choose to ignore the profile on the repository andcreate your own one from scratch.2.5.3 Uploading Your own ProfileAfter a profile has been created or updated, the AppArmor tools that a profile alsopresent in the repository has been changed or that a new one has been created. If yoursystem is configured to upload profiles to the repository, you are prompted to providea ChangeLog to document your changes before the changes are uploaded to the server.These changes are only synced to the repository, but not to the creator of the originalprofile.2.6 Important Filenames andDirectoriesThe following list contains the most important files and directories used by the App-Armor framework. If you intend to manage and troubleshoot your profiles manually,make sure that you know about these files and directories:/sys/kernel/security/apparmor/profilesVirtualized file representing the currently loaded set of profiles.Profile Components and Syntax 25