AppArmor is a Linux Security Module
1
vote
2answers
39 views
Removing AppArmor
I have MySQL installed in my development machine, where I just don't need any additional security measure.
I want to move MySQL Data files to another partition, which implies a lot of change in ...
1
vote
1answer
24 views
How to display AppArmor denied messages as desktop notifications
How can I get live notifications on my desktop whenever an AppArmor denied message is triggered?
3
votes
1answer
49 views
Preventing a specific application from accessing a folder
I just installed an application that has the bad habit of automatically scanning all my folders for files to edit.
The app has no available options to disable this behavior. I cannot just remove ...
1
vote
1answer
189 views
Bind9 - openssl problem
when I try to start bind9; simply fail because of chroot & openssl
/etc/init.d/bind9 start
log messages;
Feb 17 08:26:27 ISTVS2024 named[2440]: initializing DST: openssl failure
Feb 17 ...
1
vote
0answers
57 views
Hide Skype from panel with apparmor and keep links in chat openable
To hide Skype from unity panel we can add file /etc/apparmor.d/usr.bin.skype with such content:
# Last Modified: Tue Jun 12 03:49:49 2012 by izx
# REPOSITORY: ...
1
vote
0answers
38 views
How to grant access to raw partition for lxc container
I'm using the Linux Containers as set by default in the package lxc.
I'd like to give one of the container an exclusive access to one partition.
Does anybody know, how to configure it?
I'd like to ...
2
votes
1answer
120 views
How to fix AppArmor `could not open` error when installing php+mysql?
I want to install php5-imap php5-ldap php5-curl
sudo apt-get install php5-imap php5-ldap php5-curl
I get this error:
AppArmor parser error for /etc/apparmor.d/usr.sbin.mysqld in ...
3
votes
1answer
32 views
Apparmor has hats like null-12b08
I am running a Ubuntu 12.04.2 server with Apache using mod_apparmor. When I run aa-status, I see thousands and thousands (seriously, over 100,000) of profiles with names like
...
1
vote
2answers
39 views
Is apparmor active after installation? [duplicate]
Possible Duplicate:
How can I tell that apparmor is working?
I want to know is apparmor active after installing ubuntu12.04 ?
Thank you
0
votes
1answer
465 views
mysql: unrecognized service (apparmor)
Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this ...
0
votes
0answers
35 views
I get an error with AppArmor while upgrading Ubuntu distro
Trying to upgrade my Ubuntu 10.10 to 12.04 but I think its stuck on the apparmor parser -
It tried reloading AppArmor profiles which was terminated in the beginning and I get this:
glibc detected ** ...
43
votes
3answers
1k views
What is apparmor?
I hear a lot of talk about apparmor, I want to know the following:
What is apparmor?
How does apparmor work?
10
votes
2answers
240 views
How can I tell that apparmor is working?
Some questions I want answered in the answer:
How do I know if apparmor is running?
How can I tell if it's working well?
7
votes
2answers
114 views
How does AppArmor deal with non-profiled Programs?
I setup and configured AppArmor in Ubuntu and I would like to know how AppArmor deals with Packages and Applications which have no AppArmor Profile?
After installing the package with sudo apt-get ...
-3
votes
0answers
138 views
Is apparmor actually working well enough? [closed]
I am wondering how unsafe Ubuntu linux actually is.
Having different file permissions for root / and other users might today not be enough and actually when asking many people might point out that all ...
0
votes
0answers
55 views
What is the Apparmor GUI frontend? [duplicate]
Possible Duplicate:
apparmor needs a gui to make a working profile
I need a GUI tool frontend for AppArmor.
Anybody knows such one or anybody can help how to write or how to set apparmor ...
0
votes
1answer
97 views
Are these Apparmor profiles unnecessary?
I'm running Lubuntu 12.10. I've installed apparmor-profiles. I uninstalled the Chromium browser have the latest Chrome stable in its place.
Now I'm trying to learn a little about Apparmor profiles. ...
0
votes
1answer
71 views
Where can I find apparmor profiles?
I'm interested in using apparmor to secure my laptop, and I am wondering if there is a place where I can find apparmor profiles for firefox and other desktop programs.
1
vote
1answer
55 views
Why is there no Apparmor profile for the terminal?
I understand that Apparmor profiles are useful for securing programs that have access to the internet. Hence the question. I don't see any "terminal"-related profile here.
2
votes
0answers
92 views
Another apparmor / mysql wont install
I am trying to config another instance of mysql on my present but i can't
mysql_install_db --user=mysql --datadir=/var/lib/mysql2
Installing MySQL system tables...
ERROR: 1005 Can't create table ...
0
votes
0answers
289 views
Can't install mysql-server
I've been trying for a day or two now to apt-get install mysql-server.
I ran into this error below during my first installation (and it also fails to set the mysql root password if I choose to enter ...
1
vote
0answers
471 views
Having problems getting Samba4 and Bind9 working together because of apparmor
So I've been following the Samba4 HOWTO, which has gone reasonably well. The issue I'm having is I can't get BIND9 to restart when the samba configuration is included in /etc/bind/named.conf.local:
...
1
vote
0answers
30 views
Ubuntu 12.04.1 LTS mysql failed to start [duplicate]
Possible Duplicate:
Can't start mysql - mysql respawning too fast, stopped
I have Ubuntu 12.04 LTS server which was running OK along with MySQL service
,i had to reboot the server ...
1
vote
1answer
157 views
Is there a good apparmor profile for VirtualBox?
Is there any apparmor profile for VirtualBox that works both in normal and guest accounts for 12.04?
Where can I get it? Or maybe its code?
Is there any other way to protect my VirtualBox from ...
1
vote
1answer
130 views
apparmor-notify exclude application
Is there a way to exclude certain applications from apparmor-notify notifications. e.g. I don't want to receive any apparmor notifications from firefox but I'd like to receive notifications about the ...
1
vote
1answer
195 views
Where could I get the apparmor profile for latest Skype4?
Where could I get the apparmor profile for latest Skype4? I tried to make my own based on previous skype version but there are too many errors while launching.
0
votes
1answer
75 views
Is disabling AppArmor to solve permission issues when deploying MaaS advisable?
I'm still yet to successfully build a MAAS server, deploy nodes and charms with 12.04 LTS. In my latest troubleshooting in my logs, I have found several errors in my syslog pertaining to permissions ...
2
votes
2answers
1k views
Unable to start mysql server after update
Today I updated the system, and I cant start the mysql server:
I'm getting the following error:
Aug 14 14:32:09 VULTURUS kernel: [ 1996.413190] init: mysql main process (14122) terminated with ...
8
votes
1answer
245 views
AppArmor denying a mount operation
How do I convince apparmor to allow this operation?
[28763.284171] type=1400 audit(1344273461.387:192): apparmor="DENIED"
operation="mount" info="failed type match" error=-13 parent=7101
...
0
votes
1answer
1k views
How to allow bind in app armor?
Question:
I did setup bind9 as described here:
http://ubuntuforums.org/showthread.php?p=12149576#post12149576
Now I have a little problem with apparmor: If I switch it off, it works.
If apparmor ...
2
votes
2answers
917 views
How to re-enable a disabled standard user account?
Disabled a standard user account but did not opt to delete files. Later, tried to enable the account. At that time, a password had to be selected so entered a different one from the earlier one. Now, ...
2
votes
1answer
415 views
How do I enable the AppArmor profile for Firefox?
Recently there an article in about configuring FF with AppArmor.
When I ran the below command
cat /etc/apparmor.d/usr.bin.firefox | sudo apparmor_parser –a
I get the following error
Error: ...
0
votes
0answers
138 views
Why does the following simple AppArmor example not work?
An empty AppArmor profile should not allow anything, I guess.
But I have the impression it allows anything, see below.
Contents of file /home/alex/testcontent:
secret content, should not be ...
0
votes
0answers
12 views
Apparmor question “audit.log” [duplicate]
Possible Duplicate:
There's an issue with an Alpha/Beta Release of Ubuntu, what should I do?
I would like to deeply understanding the apparmor.
So what mean in audit.log ttaht inform:
...
0
votes
1answer
38 views
What happens if I delete a profile in apparmor
I would like to what happens a program if the apparmor profile associated with it is deleted. Would it run as if it had unconstrained access?
0
votes
1answer
166 views
where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.)
where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.)
without patvhing myself the kernel?
thanks
answer:
...
5
votes
1answer
94 views
How do I create a default fallback profile for any process that doesn't have one in AppArmor?
Is there a way to specify a default profile on any executable that doesn't have a profile already defined?
The idea is to avoid any unconstrained processes.
5
votes
2answers
209 views
How to prevent users from installing non-free software?
Is it possible to disable installation of non-free or proprietary softwares and applications in Ubuntu?
13
votes
9answers
19k views
Can't start mysql - mysql respawning too fast, stopped
Today I did a fresh install of ubuntu 12.04 and went about setting up my local development environment. I installed mysql and edited /etc/mysql/my.cnf to optimise InnoDB but when I try to restart ...
0
votes
1answer
135 views
Where can I find books or articles about iptables and apparmor?
Where can I find a book or articles that doesnt tell me how to do a ls. Im looking for one where i can learn about:
-iptables
-apparmor
I know there is ufw and gufw and no gui for app armor. I want ...
0
votes
1answer
308 views
AppArmor reinstall fails
I use apparmor together with libapache2-mod-apparmor to sandbox some websites. However After a recent reinstall it stopped working. I keep getting this error:
Setting up apparmor ...
1
vote
1answer
284 views
Apparmor doesn't work with 3.1.5-pf kernel
I have update manually the kernel on ubuntu 11.10 and now I have this messages on boot:
Cache read/write disabled: /sys/kernel/security/apparmor/features interface file missing. (Kernel needs ...
1
vote
1answer
1k views
Why do I have to enable the AppArmor profile for Firefox? Why isn't it “on” by default?
I have a pretty standard default install of 11.10 (Unity 3D).
I'm trying to understand a bit about AppArmor. sudo aa-status shows me that the available Firefox profile isn't being enforced (since it ...
0
votes
0answers
563 views
apparmor needs a gui to make a working profile [closed]
As done on Fedora 15, or Suse with Selinux, apparmor needs a wizard or -gui to setup a working profile. Imho appamor on Ubuntu is something for specialists, without such a wizard or gui. It is ...
2
votes
2answers
232 views
How to get back the firefox apparmor profile after deleting it?
I deleted the apparmor profile for firefox when I was tinkering with it... And now I can't get it back.
I uninstalled (complete) the apparmor program, profiles, etc. And when it reinstalled, I ...
11
votes
1answer
405 views
How do you permanently activate all AppArmor profiles?
I want all the AppArmor profiles activated wherever applicable permanently, how can I do that?
6
votes
1answer
840 views
What does Firefox AppArmor restrict/allow?
I know the AppArmor profiles resides in /etc/apparmor.d/, but I do not know how to interpret it. Any translation would be enlightening.
4
votes
1answer
2k views
Where do I get the AppArmor 2.4 compatibility patch?
I just compiled the 2.6.39-rc1 kernel and AppArmor complains about a missing /sys interface (plus, it slows down the boot). Where do I get the AppArmor 2.4 compatibility patch AppArmor asks for?
2
votes
1answer
596 views
Apparmor not starting with kernel LSM error [closed]
Starting apparmor on a Ubuntu Lucid Lynx gives the following:
user@host:~$ sudo /etc/init.d/apparmor start
* Starting AppArmor profiles
* AppArmor not available as kernel LSM.
...fail!
...
10
votes
5answers
9k views
How to secure ubuntu server from bruteforce ssh attacks?
I have my passwords secure, but I heard people complaining about perfomance of a server going down drastically when a bruteforce attack is taking place. How can I secure my ubuntu 10.10 server from ...
