Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 276

6 To view and edit your profile using vim, enter vim
7 Restart AppArmor and reload the profile set including the newly created one
Like the graphical front-end for building AppArmor profiles, the YaST Add Profile
Wizard, aa-genprof also supports the use of the local profile repository under /etc/
apparmor/profiles/extras and the remote AppArmor profile repository.
To use a profile from the local repository, proceed as follows:
1 Start aa-genprof as described above.
2 If you want to just use this profile, hit U (Use Profile) and follow the profile
3 Leave aa-genprof by hitting F (Finish) when you are done and save your changes.
To use the remote AppArmor profile repository with aa-genprof, proceed as follows:
1 Start aa-genprof as described above.
264 Security Guide
/etc/apparmor.d/profilename in a terminal window.
using the rcapparmor restart command.
If aa-genprof finds an inactive local profile, the following lines appear on your
terminal window:
Profile: /usr/bin/opera
[1 - Inactive local profile for /usr/bin/opera]
[(V)iew Profile] / (U)se Profile / (C)reate New Profile / Abo(r)t /
(F)inish
generation procedure outlined above.
If you want to examine the profile before activating it, hit V (View Profile).
If you want to ignore the existing profile, hit C (Create New Profile) and follow
the profile generation procedure outlined above to create the profile from scratch.
If aa-genprof detects a suitable profile on the repository server, the following
lines appear on your terminal window:
Repository: http://apparmor.opensuse.org/backend/api
Would you like to enable access to the profile repository?