Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 256

To change the status of Novell AppArmor, continue as described in
"Changing Novell AppArmor Status"
profiles, continue as described in
Profiles"
Section 27.2, "Configuring Security Event Notification"
23.6.1 Changing Novell AppArmor Status
When you change the status of AppArmor, set it to enabled or disabled. When AppArmor
is enabled, it is installed, running, and enforcing the AppArmor security policies.
1 Start YaST and select Novell AppArmor > AppArmor Control Panel.
2 Enable AppArmor by checking Enable AppArmor or disable AppArmor by des-
3 Click Done in the AppArmor Configuration window.
4 Click File > Quit in the YaST Control Center.
23.6.2 Changing the Mode of Individual
AppArmor can apply profiles in two different modes. In complain or learning mode,
violations of AppArmor profile rules, such as the profiled program accessing files not
permitted by the profile, are detected. The violations are permitted, but also logged.
This mode is convenient for developing profiles and is used by the AppArmor tools for
generating profiles. Loading a profile in enforce mode enforces the policy defined in
the profile and reports policy violation attempts to syslogd.
244 Security Guide
(page 244). To configure security event notification, continue as described in
electing it.
Profiles
(page 244). To change the mode of individual
Section 23.6.2, "Changing the Mode of Individual
Section 23.6.1,
(page 290).