AppArmor is a Linux Security Module

learn more… | top users | synonyms

1
vote
0answers
12 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
0
votes
0answers
9 views

Deactivate apparmor and activate tomoyo or akari on minimal ubuntu?

I have a minimal version of Ubuntu 15.10 running on my Pentium 3 PC. The only things I have installed on it are Lubuntu-minimal,i3wm,Firefox and Dolphin. I was wondering if there are any tutorials on ...
0
votes
1answer
10 views

AppArmor for Dropbox

I'm trying to find an apparmor profile template for limiting dropbox actions to my files. If possible, I would also like to provent it from trying to sync .git directories, due their huge number of ...
1
vote
1answer
25 views

Cannot git clone Apparmor kernel patches

Whenever I enter (git clone git://kernel.ubuntu.com/jj/ubuntu-utopic.git) into the terminal, I get this output: Cloning into 'ubuntu-utopic'... fatal: Could not read from remote repository. Please ...
0
votes
0answers
30 views

Chromium doesn't start if Apparmor is enforced in Ubuntu 14.04.3

If I do: aa-enforce /etc/apparmor.d/usr.bin.chromium-browser Chromium launcher icon goes bright & fade for sometime and Chromium doesn't start. However, if I do this: aa-complain ...
0
votes
1answer
71 views

debootstrap nested in the LXC container fails to mount proc because of apparmor

The command that is run inside an amd64 LXC container: debootstrap --arch armhf --foreign --variant=buildd --components=main,restricted,universe,multiverse vivid /var/lib/schroot/chroots/vivid-armhf ...
0
votes
0answers
10 views

Ubuntu SDK AppArmor issues with opening CSS/JS files from filesystem

I'm trying to create a new app using HTML5/JavaScript with Ubuntu SDK and my new Ubuntu Touch phone. I've managed to run it on my phone, but it doesn't load any styling information and without ...
0
votes
1answer
82 views

Libvirt Libvirtd virtualbox remote virsh list --all empty

Good afternoon, first of all excuse my english i'am a foreigner, and it's my first post... I got some trouble using virtualbox and libvirt on a LTS 14.04. I try to do a home sandbox with cuckoo ...
0
votes
0answers
54 views

apparmor error apparmor filesystem is not mounted

I installed apparmor with sudo apt-get install apparmor-profile on terminal. successfully installed apparmor, I typed sudo apparmor_status apparmor module is loaded. apparmor filesystem is not ...
0
votes
0answers
11 views

I have accidentally uninstalled Apparmor

I have accidentally uninstalled apparmor, i don't know how to reinstall it. I have made ''sudo apt-get install apparmor'' But ''update-rc.d -f apparmor'' has not been installed, Why? Could ...
6
votes
1answer
128 views

AppArmor blocks logging set up through iptables for guest account - How to enable?

To log the internet usage (visited URLs) of my local guest account, I asked the question Monitor visited websites of guest account through any browser and after assigning the guest account the fixed ...
0
votes
0answers
25 views

AppArmor causing “Error: Unable to initialize GTK+, is DISPLAY set properly?”

I am trying to create an AppArmor profile for a proprietary (not open-source single-file native Linux binary) application. And even if I allow each and every thing it tries to do in the profile, it ...
0
votes
0answers
16 views

How to confine an application written in Java with AppArmor?

May this be possible I would like to confine a particular Java application rather than the whole JVM. The answer to this question suggests it's possible. I have been highly successful testing the ...
0
votes
0answers
22 views

Why does AppArmor not block a new application installed manually to /opt?

I have just installed some proprietary apps to /opt (by creating directories and extracting archives with binaries there). And these apps have had no problems reaching the Internet or doing anything ...
3
votes
2answers
152 views

Monitor visited websites of guest account through any browser

I want to know which websites/URLs are visited by users of my home computer's guest account. Is there a way to log this and save it as nicely formatted list to the disk? I only need date/time and ...
0
votes
1answer
390 views

Ubuntu 15.10. Failed to start LSB: AppArmor initialization

I recently updated to Ubuntu 15.10. I am now getting a failed boot with the following message: Failed to start LSB: AppArmor initialization How can I further diagnose and fix this problem?
0
votes
0answers
10 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
0
votes
0answers
20 views

Does apparmor in enforce mode still logs?

I'm using apparmor with Firefox (enforce). I know that leaving in complain mode, apparmor will log what a certain program is doing. But I would like to know if it's possible to turn the "enforce" ...
0
votes
0answers
60 views

Cannot update ClamAV via freshclam after installing apparmor

I searched but didn't find an exact answer ... here is my problem: Until now updating freshclam virus definitions for clamav was fine, but after installing apparmor, freshclam does not update. I get ...
1
vote
0answers
91 views

How can I allow macchanger to run on ubuntu touch/apparmor?

I'm trying to run macchanger from the terminal application of an ubuntu touch device to avoid unscrupulous 3rd parties(i.e. wifi providers) from tracing my mac address. However it fails miserably with ...
-2
votes
1answer
17 views

how to deactivate apparmor profiles which i deleted

ah I deleted the profiles for some of my programs. now i want to deactivate them but no avail. when first i try to disable the profile for example by sudo apparmor_parser -R ...
2
votes
1answer
24 views

Sporadic messages output to console after logging in

Coming right from a fresh install of Ubuntu 14.04 Minimal/Netboot (plus some small utilities like acpid, wicd-curses, etc.), after logging in, I occasionally get floating messages (the kind typically ...
0
votes
0answers
52 views

apparmor breaks the phone?

I've tried to remove apparmor (using apt-get remove apparmor from terminal) and now the phone doesn't boot anymore. Any idea how to repair it? The apparmor didn't seem to get removed completely due an ...
1
vote
2answers
58 views

How can I secure Spotify with AppArmor?

I have Spotify installed from their repo, by following these instructions. But I am concerned about the security ramifications of having proprietary code running on my machine - since it's not ...
1
vote
1answer
166 views

the aa-enforce command for apparmor results in a “command not found” error

I am trying to enable the apparmor profile for firefox, but when i enter sudo aa-enforce /etc/apparmor.d/usr.bin.firefox i get a aa-enforce command not found message. apparmor_status indicates ...
0
votes
0answers
29 views

Ubuntu AppArmor default profiles

Could anyone please list aa-status for fresh (or simply with AppArmor unchanged) installation of Ubuntu 15.04? I set up to much profiles from packages and need to bring it do default state.
1
vote
0answers
159 views

Have localhost with dual boot (Windows/Ubuntu) share htdocs & mysql databases with XAMPP

I just got a new machine with dual boot Ubuntu+Windows 8.1 and set up a localhost using XAMPP in a way that allows me to edit and preview the files on both OSes (so htdocs and mysql databases have to ...
0
votes
2answers
72 views

Apparmor is not functioning

When I check the status of Apparmor, I get this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
1
vote
1answer
572 views

AppArmor with cupsd denied in logs

I was updating the OS today (security patches), when I found something strange in the syslog: apparmor="DENIED" operation="signal" profile="/usr/sbin/cupsd" pid=2483 comm="cupsd" ...
1
vote
0answers
59 views

Problem with Apparmor

I checked the status of Apparmor, and got this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
4
votes
1answer
205 views

AppArmor Error: “invalid VM definition” after starting lxc on updated version of libvirt (1.2.12)

I am trying to start an LXC on a newer version of libvirtd but it fails to start with the following error: $ virsh -c lxc: start textlxc error: Failed to start domain testlxc error: internal error: ...
2
votes
1answer
186 views

AppArmor denial when trying to open file using content hub

When trying to open a file using content hub using C++ I get these errors: Opening with peer com.ubuntu.music_music_2.1.857 Sdk-Launcher> Application was resumed Sdk-Launcher> There has been a ...
0
votes
0answers
89 views

Firefox Says it's Not the Default Browser & App Armor Preventing Setting Default

Ever since upgrading to Vivid, every time I start Firefox it tells me that Firefox is not my default browser, and asks if I would like to set it as the default. The odd thing is that when I go to ...
0
votes
0answers
73 views

Why does dnsmasq use /bin/dash?

I am running apparmor in enforce mode for most profiles, and I regularly see denied messages like the following one: apparmor="DENIED" operation="exec" profile="/usr/sbin/dnsmasq" name="/bin/dash" ...
0
votes
1answer
279 views

Unable to dump mysql tables to local

I was trying to dump my mysql table using the below command mysqldump --tab=/home/username/Desktop/basic/ --user myusername -p mysql user; But it returned an error saying mysqldump: Got error: 1: ...
1
vote
1answer
219 views

Ubuntu Touch Development: DBus connection via apparmor-template=unconfined?

I am trying to send DBus messages via Ubuntu Touch C++ application. With configuring default template (no error with unconfined) for Apparmor file my application is getting following error as reply: ...
0
votes
2answers
238 views

Starting Pre-cache and pre-load apparmor profiles fails on boot

I found really few topics on the whole internet about this failure, so I couldn't debug or investigate much. During the boot process I started to see the error some months ago: * Starting Pre-cache ...
0
votes
1answer
74 views

Ubuntu Touch AppArmor Kernel Patches

new to Ubuntu development: I am porting Ubuntu touch to my own device. There are many different commits related to AppArmor on ...
0
votes
0answers
90 views

Allow sudo in default guest account

I am trying to run Microsoft Office for some public workstations. I have added the following entry to my sudoers file: %win ALL=(windows) NOPASSWD: /usr/share/playonlinux/ /home/windows/.PlayOnLinux ...
0
votes
2answers
946 views

strongSwan 5.1.2 on Ubuntu Trusty (14.0.4) and AppArmor

I've configured VPN on Ubuntu Trusty with strongSwan 5.1.2 and connections are OK. Daemon is running as root. But when i execute any stroke command via ipsec wrapper in Bash (root connection), it ...
0
votes
0answers
21 views

Setting up logging preferences for bind on 14.04 Server

Is there a preferred way of setting up logging preferences for bind in Ubuntu Server 14.04? I'm trying to add category lame-servers { null; }; But I'm getting a bit confused with different ...
0
votes
0answers
43 views

Start mySQL with AppArmor on reboot

When my Ubuntu server (hosted by Rackspace) is rebooted/restarted, mySQL starts automatically as evidenced by phpMyAdmin working properly. However, my PHP code does not appear to work. When I manually ...
0
votes
0answers
75 views

Apparmor problems

I followed this persons solved question here on how to mount Apparmor: https://forum.backbox.org/general-support/apparmor-is-not-working/. After I did however, I came up with this black screen with ...
2
votes
1answer
100 views

apparmor aa-logprof not asking about all dependencies

In trying to write an apparmor profile for my python-flask app (which executes via gunicorn) I can't get aa-logprof to ask me about all the dependencies. If in complain mode the application works as ...
2
votes
2answers
457 views

Apparmor problem: Icedtea plugin freezes firefox (35.0.1)

EDIT5: finally it's probably is an Apparmor problem. /usr/lib/firefox/firefox{,*[^s][^h]} is indeed in complain mode, but /usr/lib/firefox/firefox{,*[^s][^h]}//browser_java ...
4
votes
1answer
88 views

Browsing nautilus folder containing a dvi file — apparmor/evince error

If a browse a nautilus folder that contains a .dvi file, I get errors that pop onto my screen: I think that this is due to the thumbnailer processing the file. I don't care about getting ...
2
votes
0answers
190 views

Apparmor KVM Ubuntu 14

I am running Ubuntu 14.10. I am trying to install KVM guest. When I try to do so with VNC I get following apparmor error in syslog: kernel: [ 3016.448241] audit: type=1400 audit(1423018183.349:51): ...
1
vote
0answers
114 views

AppArmor on BeagleBoard Black (and probably other ARMv7 devices)

I've installed Ubuntu onto my BeagleBoard, using the instructions at http://www.elinux.org/BeagleBoardUbuntu . This runs the ARM version of Ubuntu 14.04. This all went to plan and it worked, and I ...
0
votes
0answers
78 views

Can you use QProcess in a Click Packaged Application?

I am just curious whether this is something AppArmor allows or not? My application works fine on the desktop, but I can't get Standard output or error to even display in my app when I run it from the ...
1
vote
1answer
445 views

How to customize locally an apparmor profile?

I would like to run Firefox with aa-enforce(d) apparmor profile. This works fine, except I have a plugin that need access to the keyring via dbus. When the plugin ...