Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 338

28.4.7 Can I Manage Profiles for
Managing profiles with AppArmor requires you to have access to a the system's log
the application is running on. So you do not need to run the application on your profile
build host as long as you have access to the machine that runs the application. You can
run the application on one system, transfer the logs (/var/log/audit.log or, if
audit is not installed, /var/log/messages) to your profile build host and run
aa-logprof -f path_to_logfile.
28.4.8 How to Spot and fix AppArmor
Manually editing Novell AppArmor profiles can introduce syntax errors. If you attempt
to start or restart AppArmor with syntax errors in your profiles, error results are shown.
This example shows the syntax of the entire parser error.
localhost:~ # rcapparmor start
Loading AppArmor profiles AppArmor parser error in
/etc/apparmor.d/usr.sbin.squid at line 410: syntax error, unexpected TOK_ID,
expecting TOK_MODE
Profile /etc/apparmor.d/usr.sbin.squid failed to load
Using the AppArmor YaST tools, a graphical error message indicates which profile
contained the error and requests you to fix it.
326 Security Guide
Applications not Installed on my
System?
Syntax Errors?