AppArmor is a Linux Security Module

learn more… | top users | synonyms

0
votes
1answer
30 views

Ubuntu service apparmor cannot start

ss@ss-System:~$ sudo service apparmor start [sudo] password for ss: * Starting AppArmor profiles Skipping profile in /etc/apparmor.d/disable: usr....
0
votes
0answers
10 views

Can't run show tabels; with apparmor and mysql

I've moved my mysql directory and added some entries into apparmor to reflect this. I thought is was working fine.. The application (Jira) connects and works perfectly. But I noticed when trying to ...
1
vote
1answer
114 views

Apparmor Init Failed, Exit Code 123

Apparmor fails boot and command line start with same result as below x@x-NICEPUTER:~$ systemctl --failed UNIT LOAD ACTIVE SUB DESCRIPTION ● apparmor.service loaded failed failed ...
0
votes
0answers
123 views

14.04 to 16.04 upgrade hung

My server upgrade was going fine until it seems to have hung. I logged on to another terminal and I see the following message repeating every few seconds in /var/log/syslog: May 2 13:17:56 www ...
0
votes
1answer
36 views

Start firefox using apparmor (for extra security)

I'm having some trouble starting firefox with apparmor. Here's what I've run: $ sudo aa-enforce /etc/apparmor.d/usr.bin.firefox $ firefox /usr/lib/firefox/firefox: error while loading shared ...
0
votes
0answers
19 views

Deny guest user access to the Internet except to one address

I guess that an AppArmor profile has to be edited to archive that, but I'm lost on how to do it. If it is possible through an ufw or iptables rule I would be happy as well. Don't forget that it's ...
1
vote
1answer
23 views

AppArmor: Unusual denied “name=<string>” message

I have a custom AppArmor profile to confine Syncthing. (I realise that this might not be a specific Ubuntu question, but I only use Ubuntu so I haven't seen if this affects other Linux distros). ...
3
votes
1answer
51 views

How do I block Internet for an app using an apparmor custom profile?

I'm trying to block internet access for an app because it always asks for purchase or update even though it's free. I created an apparmor profile for that app and enforced it but after enforcing, the ...
0
votes
0answers
90 views

apparmor and fsck showing up late in syslogs and causing usb driver crash

Running 64 bit 12.04 LTS on an x86 I have an intermittent touchscreen usb driver crash I'm trying to isolate and it's giving me fits. I've been able to isolate three occurrences of the problem in ...
4
votes
1answer
98 views

How is the guest account prevented from using su and sudo?

It's already known that the guest account can't use su or sudo: Why is su disabled from guest sessions? Sudo not available in guest login How is this done? My guess would be apparmor. However, ...
0
votes
0answers
44 views

Why does the system freeze when mounting disk images

Recently I tried to mount an ISO disk image to use with KVM. Immediately the system froze (mouse stopped, time stopped, music skipped). I tried mounting it with Disk Image Mounter and from the ...
0
votes
0answers
39 views

How do I reinstall the default Apparmor Chromium profile in Ubuntu 14.04

I tried using 'aa-logprof' to modify the default Apparmor Chromium profile (since it doesn't work), but I think I may have messed up the profile because after editing the profile the 'aa-enforce' did ...
1
vote
1answer
351 views

Disabling AppArmor for KVM

I'm trying to take an external snapshot of my KVM guest using the following script: DOMAIN=test-snapshots.programster.org SNAPSHOT_NAME=snap3 STATE_FILE="/media/kvm/test-snapshots/mem-snap.qcow2" ...
0
votes
0answers
88 views

Need root access for some actions in ubuntu phone app

I am trying to develop an ubuntu phone app that does some things that are not allowed by app armor. If I connect to my phone by adb shell I can do this things without problems and without root. My ...
1
vote
0answers
61 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
0
votes
0answers
49 views

Deactivate apparmor and activate tomoyo or akari on minimal ubuntu?

I have a minimal version of Ubuntu 15.10 running on my Pentium 3 PC. The only things I have installed on it are Lubuntu-minimal,i3wm,Firefox and Dolphin. I was wondering if there are any tutorials on ...
0
votes
1answer
30 views

AppArmor for Dropbox

I'm trying to find an apparmor profile template for limiting dropbox actions to my files. If possible, I would also like to provent it from trying to sync .git directories, due their huge number of ...
1
vote
2answers
48 views

Cannot git clone Apparmor kernel patches

Whenever I enter (git clone git://kernel.ubuntu.com/jj/ubuntu-utopic.git) into the terminal, I get this output: Cloning into 'ubuntu-utopic'... fatal: Could not read from remote repository. Please ...
0
votes
0answers
115 views

Chromium doesn't start if Apparmor is enforced in Ubuntu 14.04.3

If I do: aa-enforce /etc/apparmor.d/usr.bin.chromium-browser Chromium launcher icon goes bright & fade for sometime and Chromium doesn't start. However, if I do this: aa-complain /etc/...
0
votes
1answer
211 views

debootstrap nested in the LXC container fails to mount proc because of apparmor

The command that is run inside an amd64 LXC container: debootstrap --arch armhf --foreign --variant=buildd --components=main,restricted,universe,multiverse vivid /var/lib/schroot/chroots/vivid-armhf ...
0
votes
0answers
24 views

Ubuntu SDK AppArmor issues with opening CSS/JS files from filesystem

I'm trying to create a new app using HTML5/JavaScript with Ubuntu SDK and my new Ubuntu Touch phone. I've managed to run it on my phone, but it doesn't load any styling information and without ...
0
votes
1answer
348 views

Libvirt Libvirtd virtualbox remote virsh list --all empty

Good afternoon, first of all excuse my english i'am a foreigner, and it's my first post... I got some trouble using virtualbox and libvirt on a LTS 14.04. I try to do a home sandbox with cuckoo (...
0
votes
0answers
199 views

apparmor error apparmor filesystem is not mounted

I installed apparmor with sudo apt-get install apparmor-profile on terminal. successfully installed apparmor, I typed sudo apparmor_status apparmor module is loaded. apparmor filesystem is not ...
0
votes
0answers
16 views

I have accidentally uninstalled Apparmor

I have accidentally uninstalled apparmor, i don't know how to reinstall it. I have made ''sudo apt-get install apparmor'' But ''update-rc.d -f apparmor'' has not been installed, Why? Could ...
3
votes
1answer
170 views

AppArmor blocks logging set up through iptables for guest account - How to enable?

To log the internet usage (visited URLs) of my local guest account, I asked the question Monitor visited websites of guest account through any browser and after assigning the guest account the fixed ...
0
votes
0answers
45 views

AppArmor causing “Error: Unable to initialize GTK+, is DISPLAY set properly?”

I am trying to create an AppArmor profile for a proprietary (not open-source single-file native Linux binary) application. And even if I allow each and every thing it tries to do in the profile, it ...
0
votes
0answers
64 views

How to confine an application written in Java with AppArmor?

May this be possible I would like to confine a particular Java application rather than the whole JVM. The answer to this question suggests it's possible. I have been highly successful testing the ...
0
votes
0answers
26 views

Why does AppArmor not block a new application installed manually to /opt?

I have just installed some proprietary apps to /opt (by creating directories and extracting archives with binaries there). And these apps have had no problems reaching the Internet or doing anything ...
1
vote
2answers
209 views

Monitor visited websites of guest account through any browser

I want to know which websites/URLs are visited by users of my home computer's guest account. Is there a way to log this and save it as nicely formatted list to the disk? I only need date/time and ...
1
vote
1answer
1k views

Ubuntu 15.10. Failed to start LSB: AppArmor initialization

I recently updated to Ubuntu 15.10. I am now getting a failed boot with the following message: Failed to start LSB: AppArmor initialization How can I further diagnose and fix this problem?
0
votes
0answers
15 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
0
votes
1answer
25 views

Does apparmor in enforce mode still logs?

I'm using apparmor with Firefox (enforce). I know that leaving in complain mode, apparmor will log what a certain program is doing. But I would like to know if it's possible to turn the "enforce" ...
1
vote
0answers
101 views

Cannot update ClamAV via freshclam after installing apparmor

I searched but didn't find an exact answer ... here is my problem: Until now updating freshclam virus definitions for clamav was fine, but after installing apparmor, freshclam does not update. I get ...
3
votes
0answers
161 views

How can I allow macchanger to run on ubuntu touch/apparmor?

I'm trying to run macchanger from the terminal application of an ubuntu touch device to avoid unscrupulous 3rd parties(i.e. wifi providers) from tracing my mac address. However it fails miserably with ...
-2
votes
1answer
26 views

how to deactivate apparmor profiles which i deleted

ah I deleted the profiles for some of my programs. now i want to deactivate them but no avail. when first i try to disable the profile for example by sudo apparmor_parser -R /etc/apparmor.d/usr....
2
votes
1answer
35 views

Sporadic messages output to console after logging in

Coming right from a fresh install of Ubuntu 14.04 Minimal/Netboot (plus some small utilities like acpid, wicd-curses, etc.), after logging in, I occasionally get floating messages (the kind typically ...
0
votes
0answers
68 views

apparmor breaks the phone?

I've tried to remove apparmor (using apt-get remove apparmor from terminal) and now the phone doesn't boot anymore. Any idea how to repair it? The apparmor didn't seem to get removed completely due an ...
1
vote
2answers
82 views

How can I secure Spotify with AppArmor?

I have Spotify installed from their repo, by following these instructions. But I am concerned about the security ramifications of having proprietary code running on my machine - since it's not ...
2
votes
1answer
435 views

the aa-enforce command for apparmor results in a “command not found” error

I am trying to enable the apparmor profile for firefox, but when i enter sudo aa-enforce /etc/apparmor.d/usr.bin.firefox i get a aa-enforce command not found message. apparmor_status indicates ...
0
votes
0answers
45 views

Ubuntu AppArmor default profiles

Could anyone please list aa-status for fresh (or simply with AppArmor unchanged) installation of Ubuntu 15.04? I set up to much profiles from packages and need to bring it do default state.
1
vote
0answers
249 views

Have localhost with dual boot (Windows/Ubuntu) share htdocs & mysql databases with XAMPP

I just got a new machine with dual boot Ubuntu+Windows 8.1 and set up a localhost using XAMPP in a way that allows me to edit and preview the files on both OSes (so htdocs and mysql databases have to ...
0
votes
2answers
107 views

Apparmor is not functioning

When I check the status of Apparmor, I get this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
1
vote
1answer
1k views

AppArmor with cupsd denied in logs

I was updating the OS today (security patches), when I found something strange in the syslog: apparmor="DENIED" operation="signal" profile="/usr/sbin/cupsd" pid=2483 comm="cupsd" requested_mask="send"...
1
vote
0answers
87 views

Problem with Apparmor

I checked the status of Apparmor, and got this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
4
votes
1answer
293 views

AppArmor Error: “invalid VM definition” after starting lxc on updated version of libvirt (1.2.12)

I am trying to start an LXC on a newer version of libvirtd but it fails to start with the following error: $ virsh -c lxc: start textlxc error: Failed to start domain testlxc error: internal error: ...
2
votes
1answer
235 views

AppArmor denial when trying to open file using content hub

When trying to open a file using content hub using C++ I get these errors: Opening with peer com.ubuntu.music_music_2.1.857 Sdk-Launcher> Application was resumed Sdk-Launcher> There has been a ...
0
votes
1answer
637 views

Unable to dump mysql tables to local

I was trying to dump my mysql table using the below command mysqldump --tab=/home/username/Desktop/basic/ --user myusername -p mysql user; But it returned an error saying mysqldump: Got error: 1: ...
2
votes
1answer
296 views

Ubuntu Touch Development: DBus connection via apparmor-template=unconfined?

I am trying to send DBus messages via Ubuntu Touch C++ application. With configuring default template (no error with unconfined) for Apparmor file my application is getting following error as reply: ...
0
votes
2answers
296 views

Starting Pre-cache and pre-load apparmor profiles fails on boot

I found really few topics on the whole internet about this failure, so I couldn't debug or investigate much. During the boot process I started to see the error some months ago: * Starting Pre-cache ...
0
votes
1answer
98 views

Ubuntu Touch AppArmor Kernel Patches

new to Ubuntu development: I am porting Ubuntu touch to my own device. There are many different commits related to AppArmor on https://developer.ubuntu.com/en/start/ubuntu-for-devices/porting-new-...