Using The External Repository - Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual

22.2 Using the External Repository

The external AppArmor profile repository at
serves two main purposes: Allow users to either browse and download profiles created
by other users or to upload their profiles to be able to easily use them on different ma-
chines. A valid login on the profile repository server is required for uploading profiles.
Just downloading profiles from the server does not require a login.
NOTE: Using the AppArmor Profile Repository
When using the profile repository in your deployment, bear in mind that the
profiles maintained in the repository are primarily targeted at profile developers
and might probably need fine-tuning before they suit your particular needs.
Please test the downloaded profiles extensively before deploying them to your
live setup and adjust them if necessary.
22.2.1 Setting up Profile Repository Support
Once properly configured, both the YaST and the command line tools support the use
of an external profile repository. The initial configuration takes place when you start
the YaST Add Profile Wizard, the Update Profile Wizard, aa-genprof, or aa-logprof to
create or update a profile that already exists on the repository server:
1 Determine whether to use or not to use the profile repository at all.
2 Enable the repository for profile downloads.
3 Once you have created or modified a profile, determine whether the tools should
The configuration of the repository is done by editing two configuration files, /etc/
apparmor/logprof.conf and /etc/apparmor/respository.conf.
The /etc/apparmor/logprof.conf file contains a section called
[repository]. distro determines the version of SUSE Linux Enterprise Desktop
222 Security Guide
be able to upload your profile to the repository.
If you chose to upload profiles to the repository, enter your credentials for the
repository server.
http://apparmor.opensuse.org