Novell APPARMOR Admin Manual page 35

Building Novell AppArmor Profiles With the YaST GUI
Figure 2: The Learning Mode exception requires you to define exe-
cute permissions for an entry.
3. LogProf begins suggesting directory path entries that have been
accessed by the application you are profiling (as seen in Figure 1)
or requiring you to define execute permissions for entries (as seen
in Figure 2).
For Figure 1: Select the option that will satisfy that request by
choosing either a suggested include, a particular globbed version
of the path, or the actual path name. All of these options are not
always available.
• #include: An include is the section of a Novell AppArmor pro-
file that refers to an include file. Include files procure access
permissions for programs. By using an include, you can give
the program access to directory paths or files that are also
required by other programs. Using includes can reduce the size
o f a p r o f i l e . I t ' s g o o d p r a c t i c e t o s e l e c t # i n c l u d e s w h e n s u g -
gested.
• Globbed Version: This is accessed by clicking the Glob but-
ton as described in the next step. For information on globbing
s y n t a x , r e f e r t o " Path Names and Regular Expression
35