Table of Contents
Advertisement
Updates or modifications to the application profiles are only required if the software
configuration or the desired range of activities changes. AppArmor offers intuitive tools
to handle profile updates or modifications.
Users should not notice AppArmor at all. It runs "behind the scenes" and does not require
any user interaction. Performance is not affected noticeably by AppArmor. If some
activity of the application is not covered by an AppArmor profile or if some activity
of the application is prevented by AppArmor, the administrator needs to adjust the
profile of this application to cover this kind of behavior.
This guide outlines the basic tasks that need to be performed with AppArmor to effec-
tively harden a system. For more in-depth information, refer to Novell AppArmor 2.0
Administration Guide.
49.1 Installing Novell AppArmor
Novell AppArmor is installed and running by default on any installation of SUSE®
Linux Enterprise regardless of what patterns are installed. The packages listed below
are needed for a fully functional instance of AppArmor
• apparmor-parser
• libapparmor
• apparmor-docs
• yast2-apparmor
• apparmor-profiles
• apparmor-utils
49.2 Enabling and Disabling Novell
Novell AppArmor is configured to run by default on any fresh installation of SUSE
Linux Enterprise. There are two ways of toggling the status of AppArmor:
880
Installation and Administration
AppArmor
Advertisement
Table of Contents
Troubleshooting
