AppArmor is a Linux Security Module

learn more… | top users | synonyms

0
votes
0answers
21 views

apparmor breaks the phone?

I've tried to remove apparmor (using apt-get remove apparmor from terminal) and now the phone doesn't boot anymore. Any idea how to repair it? The apparmor didn't seem to get removed completely due an ...
1
vote
2answers
24 views

How can I secure Spotify with AppArmor?

I have Spotify installed from their repo, by following these instructions. But I am concerned about the security ramifications of having proprietary code running on my machine - since it's not ...
1
vote
1answer
36 views

the aa-enforce command for apparmor results in a “command not found” error

I am trying to enable the apparmor profile for firefox, but when i enter sudo aa-enforce /etc/apparmor.d/usr.bin.firefox i get a aa-enforce command not found message. apparmor_status indicates ...
0
votes
0answers
12 views

Ubuntu AppArmor default profiles

Could anyone please list aa-status for fresh (or simply with AppArmor unchanged) installation of Ubuntu 15.04? I set up to much profiles from packages and need to bring it do default state.
1
vote
0answers
44 views

Have localhost with dual boot (Windows/Ubuntu) share htdocs & mysql databases with XAMPP

I just got a new machine with dual boot Ubuntu+Windows 8.1 and set up a localhost using XAMPP in a way that allows me to edit and preview the files on both OSes (so htdocs and mysql databases have to ...
0
votes
2answers
50 views

Apparmor is not functioning

When I check the status of Apparmor, I get this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
0
votes
0answers
72 views

AppArmor with cupsd denied in logs

I was updating the OS today (security patches), when I found something strange in the syslog: apparmor="DENIED" operation="signal" profile="/usr/sbin/cupsd" pid=2483 comm="cupsd" ...
1
vote
0answers
31 views

Problem with Apparmor

I checked the status of Apparmor, and got this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
0
votes
0answers
57 views

AppArmor Error: “invalid VM definition” after starting lxc on updated version of libvirt (1.2.12)

I am trying to start an LXC on a newer version of libvirtd but it fails to start with the following error: $ virsh -c lxc: start textlxc error: Failed to start domain testlxc error: internal error: ...
2
votes
1answer
121 views

AppArmor denial when trying to open file using content hub

When trying to open a file using content hub using C++ I get these errors: Opening with peer com.ubuntu.music_music_2.1.857 Sdk-Launcher> Application was resumed Sdk-Launcher> There has been a ...
0
votes
0answers
56 views

Firefox Says it's Not the Default Browser & App Armor Preventing Setting Default

Ever since upgrading to Vivid, every time I start Firefox it tells me that Firefox is not my default browser, and asks if I would like to set it as the default. The odd thing is that when I go to ...
0
votes
0answers
57 views

Why does dnsmasq use /bin/dash?

I am running apparmor in enforce mode for most profiles, and I regularly see denied messages like the following one: apparmor="DENIED" operation="exec" profile="/usr/sbin/dnsmasq" name="/bin/dash" ...
0
votes
1answer
109 views

Unable to dump mysql tables to local

I was trying to dump my mysql table using the below command mysqldump --tab=/home/username/Desktop/basic/ --user myusername -p mysql user; But it returned an error saying mysqldump: Got error: 1: ...
1
vote
1answer
110 views

Ubuntu Touch Development: DBus connection via apparmor-template=unconfined?

I am trying to send DBus messages via Ubuntu Touch C++ application. With configuring default template (no error with unconfined) for Apparmor file my application is getting following error as reply: ...
0
votes
2answers
157 views

Starting Pre-cache and pre-load apparmor profiles fails on boot

I found really few topics on the whole internet about this failure, so I couldn't debug or investigate much. During the boot process I started to see the error some months ago: * Starting Pre-cache ...
0
votes
1answer
47 views

Ubuntu Touch AppArmor Kernel Patches

new to Ubuntu development: I am porting Ubuntu touch to my own device. There are many different commits related to AppArmor on ...
0
votes
0answers
59 views

Allow sudo in default guest account

I am trying to run Microsoft Office for some public workstations. I have added the following entry to my sudoers file: %win ALL=(windows) NOPASSWD: /usr/share/playonlinux/ /home/windows/.PlayOnLinux ...
0
votes
2answers
542 views

strongSwan 5.1.2 on Ubuntu Trusty (14.0.4) and AppArmor

I've configured VPN on Ubuntu Trusty with strongSwan 5.1.2 and connections are OK. Daemon is running as root. But when i execute any stroke command via ipsec wrapper in Bash (root connection), it ...
0
votes
0answers
15 views

Setting up logging preferences for bind on 14.04 Server

Is there a preferred way of setting up logging preferences for bind in Ubuntu Server 14.04? I'm trying to add category lame-servers { null; }; But I'm getting a bit confused with different ...
0
votes
0answers
23 views

Start mySQL with AppArmor on reboot

When my Ubuntu server (hosted by Rackspace) is rebooted/restarted, mySQL starts automatically as evidenced by phpMyAdmin working properly. However, my PHP code does not appear to work. When I manually ...
0
votes
0answers
41 views

Apparmor problems

I followed this persons solved question here on how to mount Apparmor: https://forum.backbox.org/general-support/apparmor-is-not-working/. After I did however, I came up with this black screen with ...
1
vote
1answer
68 views

apparmor aa-logprof not asking about all dependencies

In trying to write an apparmor profile for my python-flask app (which executes via gunicorn) I can't get aa-logprof to ask me about all the dependencies. If in complain mode the application works as ...
2
votes
2answers
310 views

Apparmor problem: Icedtea plugin freezes firefox (35.0.1)

EDIT5: finally it's probably is an Apparmor problem. /usr/lib/firefox/firefox{,*[^s][^h]} is indeed in complain mode, but /usr/lib/firefox/firefox{,*[^s][^h]}//browser_java ...
4
votes
1answer
73 views

Browsing nautilus folder containing a dvi file — apparmor/evince error

If a browse a nautilus folder that contains a .dvi file, I get errors that pop onto my screen: I think that this is due to the thumbnailer processing the file. I don't care about getting ...
2
votes
0answers
144 views

Apparmor KVM Ubuntu 14

I am running Ubuntu 14.10. I am trying to install KVM guest. When I try to do so with VNC I get following apparmor error in syslog: kernel: [ 3016.448241] audit: type=1400 audit(1423018183.349:51): ...
1
vote
0answers
85 views

AppArmor on BeagleBoard Black (and probably other ARMv7 devices)

I've installed Ubuntu onto my BeagleBoard, using the instructions at http://www.elinux.org/BeagleBoardUbuntu . This runs the ARM version of Ubuntu 14.04. This all went to plan and it worked, and I ...
0
votes
0answers
87 views

Where do I have to specify Security Policies for Ubuntu Touch applications?

Here https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest I read that I have to fill the manifest.json file included in the package, but I also read that MyApps provides ...
0
votes
0answers
60 views

Can you use QProcess in a Click Packaged Application?

I am just curious whether this is something AppArmor allows or not? My application works fine on the desktop, but I can't get Standard output or error to even display in my app when I run it from the ...
0
votes
0answers
16 views

What security policy group do I need to give a Click Package to download files?

My app downloads files, ideally to the Music Folder. What security policy groups are needed by app armor to accomplish this?
1
vote
1answer
255 views

How to customize locally an apparmor profile?

I would like to run Firefox with aa-enforce(d) apparmor profile. This works fine, except I have a plugin that need access to the keyring via dbus. When the plugin ...
0
votes
1answer
257 views

Having problems with Samba4/BIND9_DLZ : AppArmor permission issue

(12.04.5LTS Server) Have a user "named", configured in the bind9 service to start. My /etc/apparmor.d/local/usr.sbin.named file /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab r, ...
1
vote
0answers
178 views

Blocking specific programs from accessing the internet isn't working (iptables / apparmor) [closed]

I'm using this guide to try to block a few programs from sending or receiving data from anything other than 127.0.0.1, but it's not working. First off, the suggested way of only allowing an IP block ...
0
votes
0answers
39 views

How does AppArmor secure Ubuntu?

How does AppArmor secure the Ubuntu system? I also want to know if AppArmor is still being developed and maintaind, thanks!
1
vote
1answer
46 views

Is evince-gtk protected by apparmor?

The 14.10 software center offers evince and a version called evince-gtk with fewer GNOME dependencies. In /etc/apparmor.d there is an apparmor profile for evince: /etc/apparmor.d/usr.bin.evince. My ...
0
votes
0answers
59 views

Is it safe to disable apparmor profile?

In this anwser I've been told I can get rid of annoying error messages by disableing AppArmor profile for telepathy-mission-control-5. However, I suspect the profile is enabled by default for a ...
0
votes
1answer
84 views

How to make non-ascii-armored public key from ascii-armored secret key

I have old key pair (GnuPG keys), both only ascii-armored 1 fresh Ubuntu-Desktop 14.04 installation How can I make a non-ascii armored public key from the old secret key?
1
vote
1answer
295 views

How do I block all traffic except firefox?

Lets say for example I want to block all traffic except incoming from nginx, outgoing for firefox and allow out and incoming to some torrent client. Would that be possible? I took a look at apparmor ...
1
vote
2answers
59 views

Permissions for thumbnailer on device

I'm developing an application for U-Touch that gets a thumbnail from a video in C++ code using libthumbnailer system library. The app does the thumbnailing perfectly in my computer, but when i try to ...
0
votes
0answers
269 views

cups-pdf unable to lookup user

I am using cups-pdf for many years now without problems. But now, its seems to be broken. Ubuntu version: Ubuntu 14.04.1 LTS I try the same setup on a fresh installed server, with same problems. Set ...
0
votes
0answers
14 views

How to enable AppArmor as kernel LSM? [duplicate]

I have installed AppArmor but when I start it it says * AppArmor not available as kernel LSM. how can I resolve this?
0
votes
0answers
56 views

System hang during Apparmor update

Just ran sudo apt-get update && apt-get upgrade on my 12.04 server. Everything seemed to be going fine until this point: Setting up apparmor-profiles (2.7.102-0ubuntu3.10) ... It's been ...
3
votes
0answers
369 views

How to use Firefox AppArmor profile with IcedTea Java plugin on Ubuntu 14.04?

Whenever I set up Ubuntu on a new system, I active the default AppArmor profile for Firefox via sudo aa-enforce /etc/apparmor.d/usr.bin.firefox Doing this on Ubuntu 14.04, however, makes Java ...
1
vote
0answers
271 views

Suspend broken: pm-suspend fails due to /sys/power/* being a Read-only file system

My System 76 laptop running 14.04 won't suspend. Running sudo pm-suspend fails with the following in /var/log/pm-suspend.log: Running hook /usr/lib/pm-utils/sleep.d/94cpufreq suspend suspend: ...
0
votes
1answer
56 views

Would AppArmor protect against a bug like Heartbleed?

Is it capable of "containing"/preventing the exploitation of things such as this?
0
votes
1answer
310 views

SLAPd - TLS not working / apparmor Errors

I've been trying to get LDAP working and set up for a few days now. The real head scratcher is that everything went fine until I got to the point of setting up TLS. I was using this guide from the ...
2
votes
0answers
31 views

Can AppArmor have default policies for all applications without profiles?

Goal: Deny all applications network access and all network access for one or more explicitly specified applications.
0
votes
2answers
180 views

Skype doesn't see my webcam

I've got Logitech C270 (/dev/video0) that is seen by Cheese in Xubuntu 14.04, but Skype doesn't recognize it. What can I do? Should I blame my apparmor profile?
3
votes
2answers
578 views

Tor not working after update

Yesterday I updated my Ubuntu 14.04 LTS and after that Tor stopped working : When I try to run Tor using command sudo service tor start it gives an error aa-exec: ERROR: profile 'system_tor' does ...
2
votes
1answer
2k views

How to fix apparmor=“DENIED” for telepathy-mission-control-5 under Ubuntu 14.04?

Just installed Ubuntu 14.04 LTS a week ago and a few programs for my work & fun: nginx server, rabbitmq server, mysql server php-fpm, hhvm sublime-text, mysql workbench hplib (for ...
4
votes
1answer
1k views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from this wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully with ...