Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I understand that Apparmor profiles are useful for securing programs that have access to the internet. Hence the question. I don't see any "terminal"-related profile here.

share|improve this question
    
You said terminal , I ask something else : Where is the profile for skype ? This is a profile that is definitely necessary, for such application. –  NikTh Nov 21 '12 at 17:00

1 Answer 1

up vote 2 down vote accepted

Terminal doesn't need a profile. By default terminal doesn't do anything. Bash (by default) is the command that lets you access a shell (horridly worded, but accurate enough for this answer). Form there you run other programs. So any profile against terminal would be totally useless (as it doesn't access anything other then it's preference files).

Keep in mind that AppArmor is basically a supplement to already existing security. If you never want terminal to access a file you can create your own profile and set it up.

As you can see in cat /etc/apparmor.d/usr.sbin.tcpdump tcpdump (a command that you would run from bash, inside a terminal) has a profile. This is how you would "secure" commands.

Also, in cat /etc/apparmor.d/abstractions/bash you will see that bash has a profile. Thus "terminal" is protected.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.