Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 243

Figure 23.3 Learning Mode Exception: Defining Execute Permissions for an Entry
10 The Add Profile Wizard begins suggesting directory path entries that have
been accessed by the application profiled (as seen in
Mode Exception: Controlling Access to Specific Resources"
requires you to define execute permissions for entries (as seen in
"Learning Mode Exception: Defining Execute Permissions for an Entry"
(page 231)).
• For Figure 23.2: Learning Mode Exception: Controlling Access to Specific
Resources: Select the option that satisfies the request for access, which
could be a suggested include, a particular globbed version of the path, or
the actual pathname. Depending on the situation, these options are avail-
able:
#include
The section of a Novell AppArmor profile that refers to an include
file. Include files give access permissions for programs. By using an
include, you can give the program access to directory paths or files
that are also required by other programs. Using includes can reduce
the size of a profile. It is good practice to select includes when sug-
gested.
Figure 23.2, "Learning
Building and Managing Profiles with YaST
(page 230)) or
Figure 23.3,
231