AppArmor is a Linux Security Module

learn more… | top users | synonyms

2
votes
1answer
7k views

How to allow bind in app armor?

Question: I did setup bind9 as described here: http://ubuntuforums.org/showthread.php?p=12149576#post12149576 Now I have a little problem with apparmor: If I switch it off, it works. If apparmor ...
0
votes
1answer
20 views

Would AppArmor protect against a bug like Heartbleed?

Is it capable of "containing"/preventing the exploitation of things such as this?
0
votes
1answer
6 views

SLAPd - TLS not working / apparmor Errors

I've been trying to get LDAP working and set up for a few days now. The real head scratcher is that everything went fine until I got to the point of setting up TLS. I was using this guide from the ...
2
votes
1answer
48 views

Tor not working after update

Yesterday I updated my Ubuntu 14.04 LTS and after that Tor stopped working : When I try to run Tor using command sudo service tor start it gives an error aa-exec: ERROR: profile 'system_tor' does ...
0
votes
0answers
8 views

Can AppArmor have default policies for all applications without profiles?

Goal: Deny all applications network access and all network access for one or more explicitly specified applications.
0
votes
0answers
50 views

Skype doesn't see my webcam

I've got Logitech C270 (/dev/video0) that is seen by Cheese in Xubuntu 14.04, but Skype doesn't recognize it. What can I do? Should I blame my apparmor profile?
0
votes
0answers
22 views

How to fix apparmor=“DENIED” for telepathy-mission-control-5 under Ubuntu 14.04?

Just installed Ubuntu 14.04 LTS a week ago and a few programs for my work & fun: nginx server, rabbitmq server, mysql server php-fpm, hhvm sublime-text, mysql workbench hplib (for ...
0
votes
0answers
34 views

Mysql failed to start

i tried to restore a db backup to a newly created database, suddenly its starts showing error. Can't connect to local MySQL server through socket /var/run/mysqld/mysqld.sock so i checked ...
-1
votes
2answers
34 views

Evince: error while loading shared libraries: Permission denied

While opening a PDF, I get a permission denied error, while ROOT. root@brix:~# evince *.pdf evince: error while loading shared libraries: libz.so.1: failed to map segment from shared object: ...
1
vote
1answer
49 views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from the Arch wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully ...
0
votes
1answer
4k views

mysql: unrecognized service (apparmor)

Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this ...
1
vote
1answer
156 views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
0
votes
0answers
100 views

apparmor=“DENIED”

I get loads of error messages like this in dmesg [613107.890167] type=1400 audit(1402488663.041:108): apparmor="DENIED" operation="exec" profile="/usr/bin/evince-thumbnailer//sanitized_helper" ...
3
votes
2answers
843 views

Where could I get the apparmor profile for latest Skype4?

Where could I get the apparmor profile for latest Skype4? I tried to make my own based on previous skype version but there are too many errors while launching.
0
votes
0answers
57 views

AppArmor and Feature Buffer Full

After upgrading from Ubuntu 12.04 LTS to 12.10 LTS, upon boot my laptop appears to hang with a black screen and a cursor (not blinking). When disabling the boot arguments "splash" and "quiet" for ...
1
vote
0answers
11 views

How to change apparmor logging file?

Apparmor logging to syslog by default. How to change apparmor config to logging to /var/log/apparmor.log for example?
0
votes
0answers
20 views

Allow folder in all AppArmor profiles?

I want to put all my modified ubuntu server configurations files (/etc/...) in one folder via symbolic links. However, it's annoying having to write the same line in all apparmor profiles. Is there ...
6
votes
2answers
1k views

What does Firefox AppArmor restrict/allow?

I know the AppArmor profiles resides in /etc/apparmor.d/, but I do not know how to interpret it. Any translation would be enlightening.
0
votes
1answer
575 views

Mysql on Ubuntu 14.04 problem with AppArmor permissions for data directory

I've been using MySQL with a different location for the database date since Ubuntu 12.04 and had no problems. My configuration was like this: Data in /home/db/mysql Link in the default location sudo ...
1
vote
1answer
88 views

How can I put tomcat under apparmor?

For security reasons, I want to put Tomcat under apparmor. The Ubuntu server(12.04 LTS) guide has a good explanation about apparmor, but I am not sure what is the correct way of creating a profile for ...
54
votes
3answers
6k views

What is apparmor?

I hear a lot of talk about apparmor, I want to know the following: What is apparmor? How does apparmor work?
1
vote
0answers
42 views

Apparmor and Ecrypfs trouble with encrypted ~/Private directory

In my system I made an encrypted ~/Private directory by ecryptfs-utils package. It works good, but I have a problem with apparmor. Into the Private folder I moved some home directories, like .local, ...
5
votes
1answer
137 views

Can apparmor restrict interpreted languages?

For interpreted/vm languages(e.g. python, java, shell scripts) can apparmor be set to only confine a particular script or program? If so, how?
20
votes
14answers
36k views

Can't start mysql - mysql respawning too fast, stopped

Today I did a fresh install of ubuntu 12.04 and went about setting up my local development environment. I installed mysql and edited /etc/mysql/my.cnf to optimise InnoDB but when I try to restart ...
1
vote
2answers
283 views

How to display AppArmor denied messages as desktop notifications

How can I get live notifications on my desktop whenever an AppArmor denied message is triggered?
1
vote
1answer
700 views

What is reason for apparmor=“DENIED” operation=“open”

Jan 26 13:25:27 nanak-P570WM kernel: [ 3184.247986] type=1400 audit(1390703127.047:85): apparmor="DENIED" operation="open" parent=2911 profile="/usr/lib/telepathy/mission-control-5" ...
0
votes
0answers
22 views

Lost internet connection after (fail) apparmor installation

Please, I would truly thank any advice on how to solve this issue: I have ubuntu gnome 13.10 64bits and I tried to install apparmor using the normal procedure: sudo add-apt-repository ...
1
vote
1answer
61 views

U1DB problems with apparmor

I'm having problem with u1db and apparmor. The application works fine, but when it is packaged apparmor does not allow the app to save data into $HOME/.local/share/.. so I can't actually save my ...
0
votes
1answer
2k views

Ubuntu 12.04 not loading after installing updates - initctl: Event failed

After updating my Ubuntu installation I get a blank screen when try to load it. I have dual boot with Windows which works fine. Going into recovery mode -> resume normal boot gives me the following ...
0
votes
0answers
223 views

Apparmor doesn't start with Ubuntu 13.10 64Bit

installed with apt-get install apparmor apt-get install apparmor-utils apparmor-profiles apparmor-notify but even after a reboot aa-status tells me apparmor module is not loaded. ...
5
votes
1answer
523 views

File access: open fails for one program but not another

This is the most unusual thing. I'm trying to start up mysqld with a different my.cnf (so I can have two MySQL daemons running without conflict). The file is /etc/mysql/my2.cnf but mysql won't open ...
1
vote
0answers
77 views

apparmor don't start with 12.04 LTS 64Bit

I installed with apt-get install apparmor-utils apparmor-profiles apparmor-notify but even after a reboot aa-status tells me apparmor module is not loaded. cant find entry in syslog and ...
0
votes
1answer
165 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
3
votes
3answers
5k views

Unable to start mysql server after update

Today I updated the system, and I cant start the mysql server: I'm getting the following error: Aug 14 14:32:09 VULTURUS kernel: [ 1996.413190] init: mysql main process (14122) terminated with ...
0
votes
0answers
32 views

How can I improve my paxtest results?

I have AppArmor Installed, but I am willing to secure my system more, I ran a paxtest and I am not impressed by the results, how can I make my results better and make my linux system kill those stuff? ...
0
votes
1answer
92 views

What are orcexec files?

Apparmor shows various programs need read access to files with names like "orcexec.3JIkjU84". it's always orcexec.* which allows for them to be read. What is the purpose of these files?
2
votes
1answer
1k views

Having problems getting Samba4 and Bind9 working together because of apparmor

So I've been following the Samba4 HOWTO, which has gone reasonably well. The issue I'm having is I can't get BIND9 to restart when the samba configuration is included in /etc/bind/named.conf.local: ...
1
vote
1answer
56 views

Is it possible to have two g++ executables with shared lib?

It might sound weird but I do want to have two g++ executables. One in normal /usr/bin/g++ which is currently working well. The other under /sandbox/g++ that is protected by apparmor. However when I ...
1
vote
0answers
278 views

Java can't find libjli.so despite ld.so.conf entry

I'm trying to get Java to run under AppArmor on 12.04 by copying the executable to /sandbox/java. (Symlinking is not an option because AppArmor fails on symlinks.) Currently, it won't run because it ...
1
vote
1answer
634 views

apt-get hang at Rsyslog

When I try to install something, there is a hang, I don't know if it's a bug or something else... root@computer:~# apt-get install Reading package list... Done Building dependancy tree Reading state ...
1
vote
2answers
605 views

Removing AppArmor

I have MySQL installed in my development machine, where I just don't need any additional security measure. I want to move MySQL Data files to another partition, which implies a lot of change in ...
0
votes
1answer
199 views

apparmor-notify exclude application

Is there a way to exclude certain applications from apparmor-notify notifications. e.g. I don't want to receive any apparmor notifications from firefox but I'd like to receive notifications about the ...
1
vote
1answer
2k views

Bind9 - openssl problem

when I try to start bind9; simply fail because of chroot & openssl /etc/init.d/bind9 start log messages; Feb 17 08:26:27 ISTVS2024 named[2440]: initializing DST: openssl failure Feb 17 ...
4
votes
1answer
145 views

Apparmor has hats like null-12b08

I am running a Ubuntu 12.04.2 server with Apache using mod_apparmor. When I run aa-status, I see thousands and thousands (seriously, over 100,000) of profiles with names like ...
8
votes
1answer
772 views

AppArmor denying a mount operation

How do I convince apparmor to allow this operation? [28763.284171] type=1400 audit(1344273461.387:192): apparmor="DENIED" operation="mount" info="failed type match" error=-13 parent=7101 ...
4
votes
1answer
176 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
2
votes
0answers
150 views

Hide Skype from panel with apparmor and keep links in chat openable

To hide Skype from unity panel we can add file /etc/apparmor.d/usr.bin.skype with such content: # Last Modified: Tue Jun 12 03:49:49 2012 by izx # REPOSITORY: ...
1
vote
0answers
109 views

How to grant access to raw partition for lxc container

I'm using the Linux Containers as set by default in the package lxc. I'd like to give one of the container an exclusive access to one partition. Does anybody know, how to configure it? I'd like to ...
2
votes
1answer
605 views

How to fix AppArmor `could not open` error when installing php+mysql?

I want to install php5-imap php5-ldap php5-curl sudo apt-get install php5-imap php5-ldap php5-curl I get this error: AppArmor parser error for /etc/apparmor.d/usr.sbin.mysqld in ...
1
vote
2answers
73 views

Is apparmor active after installation? [duplicate]

Possible Duplicate: How can I tell that apparmor is working? I want to know is apparmor active after installing ubuntu12.04 ? Thank you