Update Profiles From Syslog Entries - Novell APPARMOR Admin Manual

Building Novell AppArmor Profiles With the YaST GUI
5. Click the Yes button to delete the profile.

Update Profiles From Syslog Entries

The Novell AppArmor Profiling wizard uses LogProf, the tool that
scans log files and enables you to update profiles. LogProf tracks mes-
sages from the Novell AppArmor module that represent exceptions for
all profiles running on your system. These exceptions represent
behavior of the profiled application that is outside of the profile defini-
tion for the program. You can add the new behavior to the relevant
profile by selecting the suggested profile entry.
1. To update a profile from syslog entries, open the YaST GUI and
click Novell AppArmor. The Novell AppArmor interface displays.
2. From Novell AppArmor, click the Update Profiles From System
Logfile Wizard icon. The Logprof Profiling Wizard window displays.
Running the Update Profiles from System logfile wizard (LogProf)
results in the parsing of the learning mode log files. This will gener-
ate a series of questions which you must answer to guide LogProf
to generate the security profile.
33