Table Of Contents - Novell APPARMOR Admin Manual

U s e r ' s G u i d e
Introduction to AppArmor 3
C o n v e n t i o n s U s e d i n T h i s U s e r ' s G u i d e 3
Manual Text 3
Examples, Notes and Warnings 4
Command 4
Filename 4
Computer Output 4
Prompts 5
U n d e r s t a n d i n g T h i s U s e r ' s G u i d e 5
Getting Started With AppArmor 5
AppArmor Installation 6
Launching AppArmor through the YaST GUI 6
AppArmor Basics 6
Why Immunize Programs? 9
How To Immunize With AppArmor 9
What Should You Immunize? 10
Immunizing SetUID Programs 11
Immunizing Cron Jobs 11
Immunizing Web Applications 11
Immunizing Network Agents 13
How to Build AppArmor Profiles 16
Profile Components and Syntax 16
Breaking Down the AppArmor Profile Into Its Parts 16
#include 18
Capability Entries (POSIX.1e) 19
Choosing the YaST GUI, YaST ncurses Console or Command-line
Interface 19
To Use the YaST GUI 20
To Use the YaST ncurses Console 20
To use the Command-line Interface 20
Building AppArmor Profiles With the YaST GUI 21
Using the Add Profile Wizard 23
Editing a AppArmor Profile 28
Deleting a Profile 31
Update Profiles From Syslog Entries 32
Manually Adding a Profile 36
Managing AppArmor and Security Event Status 41
Building AppArmor Profiles Using the Command-line Interface 43
Checking the SubDomain Module Status 44
Building AppArmor Profiles 45
Add or Create a AppArmor Profile 46
Edit AppArmor Profile 46
2