AppArmor is a Linux Security Module

learn more… | top users | synonyms

2
votes
0answers
153 views

How to change apparmor logging file?

Apparmor logging to syslog by default. How to change apparmor config to logging to /var/log/apparmor.log for example?
0
votes
1answer
63 views

Allow folder in all AppArmor profiles?

I want to put all my modified ubuntu server configurations files (/etc/...) in one folder via symbolic links. However, it's annoying having to write the same line in all apparmor profiles. Is there ...
1
vote
1answer
4k views

Mysql on Ubuntu 14.04 problem with AppArmor permissions for data directory

I've been using MySQL with a different location for the database date since Ubuntu 12.04 and had no problems. My configuration was like this: Data in /home/db/mysql Link in the default location sudo ...
1
vote
1answer
240 views

How can I put tomcat under apparmor?

For security reasons, I want to put Tomcat under apparmor. The Ubuntu server(12.04 LTS) guide has a good explanation about apparmor, but I am not sure what is the correct way of creating a profile for ...
1
vote
1answer
2k views

What is reason for apparmor=“DENIED” operation=“open”

Jan 26 13:25:27 nanak-P570WM kernel: [ 3184.247986] type=1400 audit(1390703127.047:85): apparmor="DENIED" operation="open" parent=2911 profile="/usr/lib/telepathy/mission-control-5" ...
0
votes
1answer
5k views

Ubuntu 12.04 not loading after installing updates - initctl: Event failed

After updating my Ubuntu installation I get a blank screen when try to load it. I have dual boot with Windows which works fine. Going into recovery mode -> resume normal boot gives me the following ...
2
votes
1answer
98 views

U1DB problems with apparmor

I'm having problem with u1db and apparmor. The application works fine, but when it is packaged apparmor does not allow the app to save data into $HOME/.local/share/.. so I can't actually save my ...
6
votes
1answer
371 views

Can apparmor restrict interpreted languages?

For interpreted/vm languages(e.g. python, java, shell scripts) can apparmor be set to only confine a particular script or program? If so, how?
0
votes
1answer
180 views

What are orcexec files?

Apparmor shows various programs need read access to files with names like "orcexec.3JIkjU84". it's always orcexec.* which allows for them to be read. What is the purpose of these files?
0
votes
1answer
404 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
1
vote
1answer
66 views

Is it possible to have two g++ executables with shared lib?

It might sound weird but I do want to have two g++ executables. One in normal /usr/bin/g++ which is currently working well. The other under /sandbox/g++ that is protected by apparmor. However when I ...
4
votes
1answer
2k views

apt-get hang at Rsyslog

When I try to install something, there is a hang, I don't know if it's a bug or something else... root@computer:~# apt-get install Reading package list... Done Building dependancy tree Reading state ...
1
vote
2answers
815 views

Removing AppArmor

I have MySQL installed in my development machine, where I just don't need any additional security measure. I want to move MySQL Data files to another partition, which implies a lot of change in ...
2
votes
1answer
509 views

How to display AppArmor denied messages as desktop notifications

How can I get live notifications on my desktop whenever an AppArmor denied message is triggered?
4
votes
1answer
283 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
1
vote
2answers
3k views

Bind9 - openssl problem

when I try to start bind9; simply fail because of chroot & openssl /etc/init.d/bind9 start log messages; Feb 17 08:26:27 ISTVS2024 named[2440]: initializing DST: openssl failure Feb 17 ...
2
votes
0answers
181 views

Hide Skype from panel with apparmor and keep links in chat openable

To hide Skype from unity panel we can add file /etc/apparmor.d/usr.bin.skype with such content: # Last Modified: Tue Jun 12 03:49:49 2012 by izx # REPOSITORY: ...
2
votes
1answer
861 views

How to fix AppArmor `could not open` error when installing php+mysql?

I want to install php5-imap php5-ldap php5-curl sudo apt-get install php5-imap php5-ldap php5-curl I get this error: AppArmor parser error for /etc/apparmor.d/usr.sbin.mysqld in ...
4
votes
1answer
277 views

Apparmor has hats like null-12b08

I am running a Ubuntu 12.04.2 server with Apache using mod_apparmor. When I run aa-status, I see thousands and thousands (seriously, over 100,000) of profiles with names like ...
1
vote
2answers
93 views

Is apparmor active after installation? [duplicate]

Possible Duplicate: How can I tell that apparmor is working? I want to know is apparmor active after installing ubuntu12.04 ? Thank you
0
votes
1answer
5k views

mysql: unrecognized service (apparmor)

Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this ...
65
votes
3answers
11k views

What is apparmor?

I hear a lot of talk about apparmor, I want to know the following: What is apparmor? How does apparmor work?
14
votes
2answers
2k views

How can I tell that apparmor is working?

Some questions I want answered in the answer: How do I know if apparmor is running? How can I tell if it's working well?
7
votes
2answers
404 views

How does AppArmor deal with non-profiled Programs?

I setup and configured AppArmor in Ubuntu and I would like to know how AppArmor deals with Packages and Applications which have no AppArmor Profile? After installing the package with sudo apt-get ...
-3
votes
0answers
258 views

Is apparmor actually working well enough? [closed]

I am wondering how unsafe Ubuntu linux actually is. Having different file permissions for root / and other users might today not be enough and actually when asking many people might point out that all ...
0
votes
1answer
483 views

Are these Apparmor profiles unnecessary?

I'm running Lubuntu 12.10. I've installed apparmor-profiles. I uninstalled the Chromium browser have the latest Chrome stable in its place. Now I'm trying to learn a little about Apparmor profiles. ...
0
votes
1answer
189 views

Where can I find apparmor profiles?

I'm interested in using apparmor to secure my laptop, and I am wondering if there is a place where I can find apparmor profiles for firefox and other desktop programs.
1
vote
1answer
198 views

Why is there no Apparmor profile for the terminal?

I understand that Apparmor profiles are useful for securing programs that have access to the internet. Hence the question. I don't see any "terminal"-related profile here.
2
votes
0answers
349 views

Another apparmor / mysql wont install

I am trying to config another instance of mysql on my present but i can't mysql_install_db --user=mysql --datadir=/var/lib/mysql2 Installing MySQL system tables... ERROR: 1005 Can't create table ...
2
votes
1answer
2k views

Having problems getting Samba4 and Bind9 working together because of apparmor

So I've been following the Samba4 HOWTO, which has gone reasonably well. The issue I'm having is I can't get BIND9 to restart when the samba configuration is included in /etc/bind/named.conf.local: ...
1
vote
0answers
38 views

Ubuntu 12.04.1 LTS mysql failed to start [duplicate]

Possible Duplicate: Can't start mysql - mysql respawning too fast, stopped I have Ubuntu 12.04 LTS server which was running OK along with MySQL service ,i had to reboot the server ...
1
vote
1answer
455 views

Is there a good apparmor profile for VirtualBox?

Is there any apparmor profile for VirtualBox that works both in normal and guest accounts for 12.04? Where can I get it? Or maybe its code? Is there any other way to protect my VirtualBox from ...
0
votes
1answer
230 views

apparmor-notify exclude application

Is there a way to exclude certain applications from apparmor-notify notifications. e.g. I don't want to receive any apparmor notifications from firefox but I'd like to receive notifications about the ...
3
votes
2answers
1k views

Where could I get the apparmor profile for latest Skype4?

Where could I get the apparmor profile for latest Skype4? I tried to make my own based on previous skype version but there are too many errors while launching.
0
votes
1answer
125 views

Is disabling AppArmor to solve permission issues when deploying MaaS advisable?

I'm still yet to successfully build a MAAS server, deploy nodes and charms with 12.04 LTS. In my latest troubleshooting in my logs, I have found several errors in my syslog pertaining to permissions ...
4
votes
3answers
7k views

Unable to start mysql server after update

Today I updated the system, and I cant start the mysql server: I'm getting the following error: Aug 14 14:32:09 VULTURUS kernel: [ 1996.413190] init: mysql main process (14122) terminated with ...
8
votes
1answer
1k views

AppArmor denying a mount operation

How do I convince apparmor to allow this operation? [28763.284171] type=1400 audit(1344273461.387:192): apparmor="DENIED" operation="mount" info="failed type match" error=-13 parent=7101 ...
3
votes
1answer
12k views

How to allow bind in app armor?

Question: I did setup bind9 as described here: http://ubuntuforums.org/showthread.php?p=12149576#post12149576 Now I have a little problem with apparmor: If I switch it off, it works. If apparmor ...
2
votes
2answers
6k views

How to re-enable a disabled standard user account?

Disabled a standard user account but did not opt to delete files. Later, tried to enable the account. At that time, a password had to be selected so entered a different one from the earlier one. Now, ...
1
vote
1answer
2k views

How do I enable the AppArmor profile for Firefox?

Recently there an article in about configuring FF with AppArmor. When I ran the below command cat /etc/apparmor.d/usr.bin.firefox | sudo apparmor_parser –a I get the following error Error: ...
0
votes
1answer
68 views

What happens if I delete a profile in apparmor

I would like to what happens a program if the apparmor profile associated with it is deleted. Would it run as if it had unconstrained access?
0
votes
1answer
233 views

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.)

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.) without patvhing myself the kernel? thanks answer: ...
5
votes
1answer
158 views

How do I create a default fallback profile for any process that doesn't have one in AppArmor?

Is there a way to specify a default profile on any executable that doesn't have a profile already defined? The idea is to avoid any unconstrained processes.
5
votes
2answers
470 views

How to prevent users from installing non-free software?

Is it possible to disable installation of non-free or proprietary softwares and applications in Ubuntu?
26
votes
15answers
49k views

Can't start mysql - mysql respawning too fast, stopped

Today I did a fresh install of ubuntu 12.04 and went about setting up my local development environment. I installed mysql and edited /etc/mysql/my.cnf to optimise InnoDB but when I try to restart ...
0
votes
1answer
275 views

Where can I find books or articles about iptables and apparmor?

Where can I find a book or articles that doesnt tell me how to do a ls. Im looking for one where i can learn about: -iptables -apparmor I know there is ufw and gufw and no gui for app armor. I want ...
0
votes
1answer
913 views

AppArmor reinstall fails

I use apparmor together with libapache2-mod-apparmor to sandbox some websites. However After a recent reinstall it stopped working. I keep getting this error: Setting up apparmor ...
1
vote
1answer
330 views

Apparmor doesn't work with 3.1.5-pf kernel

I have update manually the kernel on ubuntu 11.10 and now I have this messages on boot: Cache read/write disabled: /sys/kernel/security/apparmor/features interface file missing. (Kernel needs ...
3
votes
2answers
4k views

Why do I have to enable the AppArmor profile for Firefox? Why isn't it “on” by default?

I have a pretty standard default install of 11.10 (Unity 3D). I'm trying to understand a bit about AppArmor. sudo aa-status shows me that the available Firefox profile isn't being enforced (since it ...
5
votes
1answer
622 views

File access: open fails for one program but not another

This is the most unusual thing. I'm trying to start up mysqld with a different my.cnf (so I can have two MySQL daemons running without conflict). The file is /etc/mysql/my2.cnf but mysql won't open ...