AppArmor is a Linux Security Module

learn more… | top users | synonyms

0
votes
0answers
14 views

Apparmor problems

I followed this persons solved question here on how to mount Apparmor: https://forum.backbox.org/general-support/apparmor-is-not-working/. After I did however, I came up with this black screen with ...
2
votes
2answers
102 views

Apparmor problem: Icedtea plugin freezes firefox (35.0.1)

EDIT5: finally it's probably is an Apparmor problem. /usr/lib/firefox/firefox{,*[^s][^h]} is indeed in complain mode, but /usr/lib/firefox/firefox{,*[^s][^h]}//browser_java ...
0
votes
1answer
51 views

Allow folder in all AppArmor profiles?

I want to put all my modified ubuntu server configurations files (/etc/...) in one folder via symbolic links. However, it's annoying having to write the same line in all apparmor profiles. Is there ...
3
votes
2answers
3k views

Why do I have to enable the AppArmor profile for Firefox? Why isn't it “on” by default?

I have a pretty standard default install of 11.10 (Unity 3D). I'm trying to understand a bit about AppArmor. sudo aa-status shows me that the available Firefox profile isn't being enforced (since it ...
1
vote
0answers
15 views

apparmor aa-logprof not asking about all dependencies

In trying to write an apparmor profile for my python-flask app (which executes via gunicorn) I can't get aa-logprof to ask me about all the dependencies. If in complain mode the application works as ...
1
vote
1answer
92 views

How to customize locally an apparmor profile?

I would like to run Firefox with aa-enforce(d) apparmor profile. This works fine, except I have a plugin that need access to the keyring via dbus. When the plugin ...
25
votes
15answers
43k views

Can't start mysql - mysql respawning too fast, stopped

Today I did a fresh install of ubuntu 12.04 and went about setting up my local development environment. I installed mysql and edited /etc/mysql/my.cnf to optimise InnoDB but when I try to restart ...
0
votes
1answer
5k views

mysql: unrecognized service (apparmor)

Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this ...
4
votes
1answer
47 views

Browsing nautilus folder containing a dvi file — apparmor/evince error

If a browse a nautilus folder that contains a .dvi file, I get errors that pop onto my screen: I think that this is due to the thumbnailer processing the file. I don't care about getting ...
3
votes
1answer
1k views

apt-get hang at Rsyslog

When I try to install something, there is a hang, I don't know if it's a bug or something else... root@computer:~# apt-get install Reading package list... Done Building dependancy tree Reading state ...
1
vote
2answers
2k views

Bind9 - openssl problem

when I try to start bind9; simply fail because of chroot & openssl /etc/init.d/bind9 start log messages; Feb 17 08:26:27 ISTVS2024 named[2440]: initializing DST: openssl failure Feb 17 ...
1
vote
0answers
48 views

Apparmor KVM Ubuntu 14

I am running Ubuntu 14.10. I am trying to install KVM guest. When I try to do so with VNC I get following apparmor error in syslog: kernel: [ 3016.448241] audit: type=1400 audit(1423018183.349:51): ...
1
vote
0answers
30 views

AppArmor on BeagleBoard Black (and probably other ARMv7 devices)

I've installed Ubuntu onto my BeagleBoard, using the instructions at http://www.elinux.org/BeagleBoardUbuntu . This runs the ARM version of Ubuntu 14.04. This all went to plan and it worked, and I ...
0
votes
0answers
23 views

Where do I have to specify Security Policies for Ubuntu Touch applications?

Here https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest I read that I have to fill the manifest.json file included in the package, but I also read that MyApps provides ...
0
votes
0answers
19 views

Can you use QProcess in a Click Packaged Application?

I am just curious whether this is something AppArmor allows or not? My application works fine on the desktop, but I can't get Standard output or error to even display in my app when I run it from the ...
0
votes
0answers
10 views

What security policy group do I need to give a Click Package to download files?

My app downloads files, ideally to the Music Folder. What security policy groups are needed by app armor to accomplish this?
2
votes
1answer
83 views

U1DB problems with apparmor

I'm having problem with u1db and apparmor. The application works fine, but when it is packaged apparmor does not allow the app to save data into $HOME/.local/share/.. so I can't actually save my ...
0
votes
2answers
146 views

Skype doesn't see my webcam

I've got Logitech C270 (/dev/video0) that is seen by Cheese in Xubuntu 14.04, but Skype doesn't recognize it. What can I do? Should I blame my apparmor profile?
0
votes
1answer
117 views

Having problems with Samba4/BIND9_DLZ : AppArmor permission issue

(12.04.5LTS Server) Have a user "named", configured in the bind9 service to start. My /etc/apparmor.d/local/usr.sbin.named file /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab r, ...
1
vote
0answers
81 views

Blocking specific programs from accessing the internet isn't working (iptables / apparmor) [closed]

I'm using this guide to try to block a few programs from sending or receiving data from anything other than 127.0.0.1, but it's not working. First off, the suggested way of only allowing an IP block ...
0
votes
0answers
29 views

How does AppArmor secure Ubuntu?

How does AppArmor secure the Ubuntu system? I also want to know if AppArmor is still being developed and maintaind, thanks!
1
vote
2answers
44 views

Permissions for thumbnailer on device

I'm developing an application for U-Touch that gets a thumbnail from a video in C++ code using libthumbnailer system library. The app does the thumbnailing perfectly in my computer, but when i try to ...
1
vote
1answer
30 views

Is evince-gtk protected by apparmor?

The 14.10 software center offers evince and a version called evince-gtk with fewer GNOME dependencies. In /etc/apparmor.d there is an apparmor profile for evince: /etc/apparmor.d/usr.bin.evince. My ...
0
votes
0answers
40 views

Is it safe to disable apparmor profile?

In this anwser I've been told I can get rid of annoying error messages by disableing AppArmor profile for telepathy-mission-control-5. However, I suspect the profile is enabled by default for a ...
2
votes
1answer
553 views

How to fix apparmor=“DENIED” for telepathy-mission-control-5 under Ubuntu 14.04?

Just installed Ubuntu 14.04 LTS a week ago and a few programs for my work & fun: nginx server, rabbitmq server, mysql server php-fpm, hhvm sublime-text, mysql workbench hplib (for ...
0
votes
1answer
30 views

How to make non-ascii-armored public key from ascii-armored secret key

I have old key pair (GnuPG keys), both only ascii-armored 1 fresh Ubuntu-Desktop 14.04 installation How can I make a non-ascii armored public key from the old secret key?
1
vote
1answer
111 views

How do I block all traffic except firefox?

Lets say for example I want to block all traffic except incoming from nginx, outgoing for firefox and allow out and incoming to some torrent client. Would that be possible? I took a look at apparmor ...
2
votes
2answers
391 views

Tor not working after update

Yesterday I updated my Ubuntu 14.04 LTS and after that Tor stopped working : When I try to run Tor using command sudo service tor start it gives an error aa-exec: ERROR: profile 'system_tor' does ...
0
votes
0answers
148 views

cups-pdf unable to lookup user

I am using cups-pdf for many years now without problems. But now, its seems to be broken. Ubuntu version: Ubuntu 14.04.1 LTS I try the same setup on a fresh installed server, with same problems. Set ...
0
votes
0answers
12 views

How to enable AppArmor as kernel LSM? [duplicate]

I have installed AppArmor but when I start it it says * AppArmor not available as kernel LSM. how can I resolve this?
0
votes
0answers
35 views

System hang during Apparmor update

Just ran sudo apt-get update && apt-get upgrade on my 12.04 server. Everything seemed to be going fine until this point: Setting up apparmor-profiles (2.7.102-0ubuntu3.10) ... It's been ...
3
votes
0answers
263 views

How to use Firefox AppArmor profile with IcedTea Java plugin on Ubuntu 14.04?

Whenever I set up Ubuntu on a new system, I active the default AppArmor profile for Firefox via sudo aa-enforce /etc/apparmor.d/usr.bin.firefox Doing this on Ubuntu 14.04, however, makes Java ...
3
votes
1answer
681 views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from this wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully with ...
1
vote
0answers
208 views

Suspend broken: pm-suspend fails due to /sys/power/* being a Read-only file system

My System 76 laptop running 14.04 won't suspend. Running sudo pm-suspend fails with the following in /var/log/pm-suspend.log: Running hook /usr/lib/pm-utils/sleep.d/94cpufreq suspend suspend: ...
63
votes
3answers
9k views

What is apparmor?

I hear a lot of talk about apparmor, I want to know the following: What is apparmor? How does apparmor work?
0
votes
0answers
157 views

Local folder for specific MySQL databases with symlinks

Moving specific MySQL databases under home folder using symlink used to work in the past for me (maybe before upgrading from 13.10 to 14.04) but now, following the same procedure, it just does not ...
3
votes
1answer
10k views

How to allow bind in app armor?

Question: I did setup bind9 as described here: http://ubuntuforums.org/showthread.php?p=12149576#post12149576 Now I have a little problem with apparmor: If I switch it off, it works. If apparmor ...
0
votes
1answer
50 views

Would AppArmor protect against a bug like Heartbleed?

Is it capable of "containing"/preventing the exploitation of things such as this?
0
votes
1answer
150 views

SLAPd - TLS not working / apparmor Errors

I've been trying to get LDAP working and set up for a few days now. The real head scratcher is that everything went fine until I got to the point of setting up TLS. I was using this guide from the ...
2
votes
0answers
22 views

Can AppArmor have default policies for all applications without profiles?

Goal: Deny all applications network access and all network access for one or more explicitly specified applications.
0
votes
0answers
2k views

Mysql failed to start

i tried to restore a db backup to a newly created database, suddenly its starts showing error. Can't connect to local MySQL server through socket /var/run/mysqld/mysqld.sock so i checked ...
-1
votes
2answers
399 views

Evince: error while loading shared libraries: Permission denied

While opening a PDF, I get a permission denied error, while ROOT. root@brix:~# evince *.pdf evince: error while loading shared libraries: libz.so.1: failed to map segment from shared object: ...
3
votes
1answer
1k views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
1
vote
0answers
611 views

apparmor=“DENIED”

I get loads of error messages like this in dmesg [613107.890167] type=1400 audit(1402488663.041:108): apparmor="DENIED" operation="exec" profile="/usr/bin/evince-thumbnailer//sanitized_helper" ...
3
votes
2answers
1k views

Where could I get the apparmor profile for latest Skype4?

Where could I get the apparmor profile for latest Skype4? I tried to make my own based on previous skype version but there are too many errors while launching.
1
vote
0answers
77 views

How to change apparmor logging file?

Apparmor logging to syslog by default. How to change apparmor config to logging to /var/log/apparmor.log for example?
6
votes
2answers
1k views

What does Firefox AppArmor restrict/allow?

I know the AppArmor profiles resides in /etc/apparmor.d/, but I do not know how to interpret it. Any translation would be enlightening.
0
votes
1answer
3k views

Mysql on Ubuntu 14.04 problem with AppArmor permissions for data directory

I've been using MySQL with a different location for the database date since Ubuntu 12.04 and had no problems. My configuration was like this: Data in /home/db/mysql Link in the default location sudo ...
1
vote
1answer
186 views

How can I put tomcat under apparmor?

For security reasons, I want to put Tomcat under apparmor. The Ubuntu server(12.04 LTS) guide has a good explanation about apparmor, but I am not sure what is the correct way of creating a profile for ...
1
vote
0answers
67 views

Apparmor and Ecrypfs trouble with encrypted ~/Private directory

In my system I made an encrypted ~/Private directory by ecryptfs-utils package. It works good, but I have a problem with apparmor. Into the Private folder I moved some home directories, like .local, ...