Novell APPARMOR Admin Manual page 81

Apache ChangeHat
In this demo, we will generate a profile for the application phpsysinfo
(refer to http://phpsysinfo.sourceforge.net for more information). The
phpsysinfo-dev package is assumed to be installed under
/srv/www/htdocs/phpsysinfo-dev/ onto a clean (new) install of Novell
AppArmor.
1. Once phpsysinfo-dev is installed, you are ready to add Hats to
the Apache profile. From the Novell AppArmor GUI, select Add Pro-
file Wizard.
2. In the Profile to Add field, enter httpd2-prefork.
3. Click the Create Profile button. The Genprof-SubDomain Profil-
ing Wizard window displays.
4. Restart Apache by typing /etc/init.d/apache2 stop and
then /etc/init.d/apache2 start in a terminal window while
logged in as root.
Note:
Any program you are profiling, you would restart at this point.
5. Type http://localhost/phpsysinfo-dev/ into an Internet browser
window. The browser window should display network usage and
system information.
Note:
To ensure that this request is processed by the server and you
don't review cached data in your browser you should refresh the page.
To do this - click the browser Refresh button to make sure that
Apache processes the request for the phpsysinfo-dev URI.
6. Click the Scan System Log for Entries to Add to Profiles button.
Novell AppArmor launches the Logprof tool which scans the all the
information learned in the previous step. It begins to prompt you
with profile questions.
81