Backing Up Your Security Profiles; Changing Your Security Profiles; Introducing New Software Into Your Environment - Novell APPARMOR Admin Manual

Maintaining Your Security Profiles

Backing Up Your Security Profiles

Because you take the time to make profiles, it makes sense to back
them up. Backing up profiles might save you from having to re-profile
all your programs after a disk crash. Also, if profiles are changed, you
can easily restore previous settings by using the backed up files.
Backing up profiles can be done by copying the profile files to a speci-
fied directory.
1. You should first archive the files into one file.To do this, open a ter-
minal window and type the following as root:
tar zclpf profiles.tgz /etc/subdomain.d
The simplest method to ensure that your security policy files are regu-
larly backed up is to include the directory /etc/subdomain.d in your
list of directories that you backup system archives.
2. You can also use scp or a file management GUI to store the files
on some kind of storage media, on the network, or on another PC.

Changing Your Security Profiles

Maintenance of security profiles includes changing them if you decide
that your system requires more or less security for its applications. To
c h a n g e y o u r p r o f i l e s i n N o v e l l A p p A r mo r , r e f e r t o " Editing a Novell
AppArmor Profile" o n p a g e2 9 .

Introducing New Software Into Your Environment

When you add a new application version or patch to your system, you
should always update the profile to fit your needs. You have several
o p t i o n s t h a t d e p e n d o n y o u r c o mp a n y ' s s o f t w a r e d e p l o y me n t s t r a t e g y .
You can deploy your patches and upgrades into a test or production
environment and the following explain how to go about it with each
method.
If you intend to deploy a patch or upgrade in a test enviroment, the
best method for updating your profiles is to do one of the following:
• Run the Profiling Wizard by selecting Add Profile Wizard in YaST.
This will update your application profile set with the current produc-
tions using minimal effort. For step-by-step instructions, refer to
77