Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 275

Select Enter
Allows access to the selected directory path.
Allow
Allows access to the specified directory path entries. AppArmor suggests
file permission access. For more information, refer to
Permission Access Modes"
Deny
Prevents the program from accessing the specified directory path entries.
AppArmor then continues to the next event.
New
Prompts you to enter your own rule for this event, allowing you to
specify a regular expression. If the expression does not actually satisfy
the event that prompted the question in the first place, AppArmor asks
for confirmation and lets you reenter the expression.
Glob
Select a specific path or create a general rule using wild cards that match
a broader set of paths. To select any of the offered paths, enter the
number that is printed in front of the path then decide how to proceed
with the selected item.
For more information about globbing syntax, refer to
and Globbing" (page 206).
Glob w/Ext
This modifies the original directory path while retaining the filename
extension. For example, /etc/apache2/file.ext becomes /etc/
apache2/*.ext, adding the wild card (asterisk) in place of the file-
name. This allows the program to access all files in the suggested direc-
tory that end with the .ext extension.
Abort
Aborts aa-logprof, losing all rule changes entered so far and leaving all
profiles unmodified.
Finish
Closes aa-logprof, saving all rule changes entered so far and modifying
all profiles.
(page 209).
Building Profiles from the Command Line
Section 21.7, "File
Section 21.6, "Paths
263