Adding Hats And Entries To Hats - Novell APPARMOR Admin Manual

U s e r ' s G u i d e
process running under the parent profile httpd2-prefork.
^phpsysinfo {
#include <program-chunks/base-files>
/bin/df
/bin/bash
/dev/tty
/etc/SuSE-release
/etc/fstab
/etc/hosts
/etc/mtab
/proc/**
/sbin/lspci
/srv/www/htdocs/sysinfo/**
/sys/devices/**
/usr/bin/who
/usr/share/pci.ids
/var/log/apache2/{access,error}_log
/var/run/utmp
}

Adding Hats and Entries to Hats

When you use the Edit Novell AppArmor Profile dialog (for instruc-
t i o n s , r e f e r t o " Editing a Novell AppArmor Profile" o n p a g e2 9 ) o r w h e n
you add a new profile uising the Manually Add Novell AppArmor
Profile ( f o r i n s t r u c t i o n s , r e f e r t o " Manually Adding a Profile" o n
page 37), you are given the option of adding Hats (subprofiles) to your
Novell AppArmor profiles.
84
/sys/bus/pci/devices
ix,
ix,
rw,
r,
r,
r,
r,
r,
ix,
r,
r,
r,
ix,
r,
w,
r,