openSUSE-Dokumentation
Chapter 4. Building and Managing Profiles with YaST / 4.5. Updating Profiles from Log Entries
Prev4.4. Deleting a Profile4.6. Managing Novell AppArmor and Security Event StatusNext

Updating Profiles from Log Entries

The Novell AppArmor profile wizard uses aa-logprof, the tool that scans log files and enables you to update profiles. aa-logprof tracks messages from the Novell AppArmor module that represent exceptions for all profiles running on your system. These exceptions represent the behavior of the profiled application that is outside of the profile definition for the program. You can add the new behavior to the relevant profile by selecting the suggested profile entry.

[Tip]Support for the External Profile Repository

Similar to the Add Profile Wizard, the Update Profile Wizard also supports profile exchange with the external repository server. For background information on the use of the external AppArmor profile repository, refer to Section 3.2, “Using the External Repository”. For details on how to configure access and access mode to the server, check the procedure described under Section 4.1, “Adding a Profile Using the Wizard”.

  1. Start YaST and select Novell AppArmor+Update Profile Wizard.

    The AppArmor profile wizard

    Running Update Profile Wizard (aa-logprof) parses the learning mode log files. This generates a series of questions that you must answer to guide aa-logprof to generate the security profile. The exact procedure is the same as with creating a new profile. Refer to Step 9 in Section 4.1, “Adding a Profile Using the Wizard” for details.

  2. When you are done, click Finish. In the following pop-up, click Yes to exit the Add Profile Wizard. The profile is saved and loaded into the Novell AppArmor module.

Prev4.4. Deleting a ProfileHome4.6. Managing Novell AppArmor and Security Event StatusNext