| openSUSE-Dokumentation / | ||||
|---|---|---|---|---|
 | 19. GNU Free Documentation License | 2. Starting and Stopping AppArmor |  | |
| openSUSE-Dokumentation / | ||||
|---|---|---|---|---|
| 19. GNU Free Documentation License | 2. Starting and Stopping AppArmor | | |
Contents
Abstract
This document helps you understand the main concepts behind Novell® AppArmor—the content of AppArmor profiles. Learn how to create or modify AppArmor profiles. You can create and manage AppArmor profiles in three different ways. The most convenient interface to AppArmor is provided by means of the AppArmor YaST modules which can be used either in graphical or ncurses mode. The same functionality is provided by the AppArmor command line tools or if you just edit the profiles in a text editor.
In complain or learning mode, violations of AppArmor profile rules, such as the profiled program accessing files not permitted by the profile, are detected. The violations are permitted, but also logged. This mode is convenient for developing profiles and is used by the AppArmor tools for generating profiles.
Loading a profile in enforcement mode enforces the policy defined in the profile as well as reports policy violation attempts to syslogd.
