AppArmor is a Linux Security Module

learn more… | top users | synonyms

19
votes
14answers
33k views

Can't start mysql - mysql respawning too fast, stopped

Today I did a fresh install of ubuntu 12.04 and went about setting up my local development environment. I installed mysql and edited /etc/mysql/my.cnf to optimise InnoDB but when I try to restart ...
0
votes
1answer
224 views

Where can I find books or articles about iptables and apparmor?

Where can I find a book or articles that doesnt tell me how to do a ls. Im looking for one where i can learn about: -iptables -apparmor I know there is ufw and gufw and no gui for app armor. I want ...
0
votes
1answer
609 views

AppArmor reinstall fails

I use apparmor together with libapache2-mod-apparmor to sandbox some websites. However After a recent reinstall it stopped working. I keep getting this error: Setting up apparmor ...
1
vote
1answer
314 views

Apparmor doesn't work with 3.1.5-pf kernel

I have update manually the kernel on ubuntu 11.10 and now I have this messages on boot: Cache read/write disabled: /sys/kernel/security/apparmor/features interface file missing. (Kernel needs ...
2
votes
1answer
2k views

Why do I have to enable the AppArmor profile for Firefox? Why isn't it “on” by default?

I have a pretty standard default install of 11.10 (Unity 3D). I'm trying to understand a bit about AppArmor. sudo aa-status shows me that the available Firefox profile isn't being enforced (since it ...
5
votes
1answer
480 views

File access: open fails for one program but not another

This is the most unusual thing. I'm trying to start up mysqld with a different my.cnf (so I can have two MySQL daemons running without conflict). The file is /etc/mysql/my2.cnf but mysql won't open ...
2
votes
2answers
269 views

How to get back the firefox apparmor profile after deleting it?

I deleted the apparmor profile for firefox when I was tinkering with it... And now I can't get it back. I uninstalled (complete) the apparmor program, profiles, etc. And when it reinstalled, I ...
11
votes
1answer
579 views

How do you permanently activate all AppArmor profiles?

I want all the AppArmor profiles activated wherever applicable permanently, how can I do that?
5
votes
2answers
971 views

What does Firefox AppArmor restrict/allow?

I know the AppArmor profiles resides in /etc/apparmor.d/, but I do not know how to interpret it. Any translation would be enlightening.
4
votes
1answer
3k views

Where do I get the AppArmor 2.4 compatibility patch?

I just compiled the 2.6.39-rc1 kernel and AppArmor complains about a missing /sys interface (plus, it slows down the boot). Where do I get the AppArmor 2.4 compatibility patch AppArmor asks for?
2
votes
1answer
808 views

Apparmor not starting with kernel LSM error [closed]

Starting apparmor on a Ubuntu Lucid Lynx gives the following: user@host:~$ sudo /etc/init.d/apparmor start * Starting AppArmor profiles * AppArmor not available as kernel LSM. ...fail! ...
12
votes
5answers
16k views

How to secure ubuntu server from bruteforce ssh attacks?

I have my passwords secure, but I heard people complaining about perfomance of a server going down drastically when a bruteforce attack is taking place. How can I secure my ubuntu 10.10 server from ...
6
votes
1answer
478 views

Is troubleshooting AppArmor with 'teardown' unsafe?

I understand there is a safer, more targeted way to troubleshoot AppArmor's possible contribution to an issue than completely stopping the service and tearing down AppArmor profiles. Can someone give ...
11
votes
2answers
1k views

Is it a bad idea to run SELinux and AppArmor at the same time?

My corporate policy says that Linux boxes must be secured with SELinux (so that a security auditor can check the 'yes, we're extremely secure!' checkbox for each server). I had hoped to take ...