AppArmor is a Linux Security Module

learn more… | top users | synonyms

4
votes
1answer
98 views

How is the guest account prevented from using su and sudo?

It's already known that the guest account can't use su or sudo: Why is su disabled from guest sessions? Sudo not available in guest login How is this done? My guess would be apparmor. However, ...
0
votes
1answer
7k views

mysql: unrecognized service (apparmor)

Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this question)[http://askubuntu.com/questions/224/how-to-i-move-mysql-...
1
vote
2answers
48 views

Cannot git clone Apparmor kernel patches

Whenever I enter (git clone git://kernel.ubuntu.com/jj/ubuntu-utopic.git) into the terminal, I get this output: Cloning into 'ubuntu-utopic'... fatal: Could not read from remote repository. Please ...
0
votes
1answer
30 views

Ubuntu service apparmor cannot start

ss@ss-System:~$ sudo service apparmor start [sudo] password for ss: * Starting AppArmor profiles Skipping profile in /etc/apparmor.d/disable: usr....
0
votes
0answers
10 views

Can't run show tabels; with apparmor and mysql

I've moved my mysql directory and added some entries into apparmor to reflect this. I thought is was working fine.. The application (Jira) connects and works perfectly. But I noticed when trying to ...
0
votes
1answer
38 views

Start firefox using apparmor (for extra security)

I'm having some trouble starting firefox with apparmor. Here's what I've run: $ sudo aa-enforce /etc/apparmor.d/usr.bin.firefox $ firefox /usr/lib/firefox/firefox: error while loading shared ...
1
vote
1answer
122 views

Apparmor Init Failed, Exit Code 123

Apparmor fails boot and command line start with same result as below x@x-NICEPUTER:~$ systemctl --failed UNIT LOAD ACTIVE SUB DESCRIPTION ● apparmor.service loaded failed failed ...
1
vote
1answer
23 views

AppArmor: Unusual denied “name=<string>” message

I have a custom AppArmor profile to confine Syncthing. (I realise that this might not be a specific Ubuntu question, but I only use Ubuntu so I haven't seen if this affects other Linux distros). ...
0
votes
0answers
124 views

14.04 to 16.04 upgrade hung

My server upgrade was going fine until it seems to have hung. I logged on to another terminal and I see the following message repeating every few seconds in /var/log/syslog: May 2 13:17:56 www ...
0
votes
0answers
19 views

Deny guest user access to the Internet except to one address

I guess that an AppArmor profile has to be edited to archive that, but I'm lost on how to do it. If it is possible through an ufw or iptables rule I would be happy as well. Don't forget that it's ...
0
votes
0answers
88 views

Need root access for some actions in ubuntu phone app

I am trying to develop an ubuntu phone app that does some things that are not allowed by app armor. If I connect to my phone by adb shell I can do this things without problems and without root. My ...
0
votes
1answer
25 views

Does apparmor in enforce mode still logs?

I'm using apparmor with Firefox (enforce). I know that leaving in complain mode, apparmor will log what a certain program is doing. But I would like to know if it's possible to turn the "enforce" ...
3
votes
1answer
52 views

How do I block Internet for an app using an apparmor custom profile?

I'm trying to block internet access for an app because it always asks for purchase or update even though it's free. I created an apparmor profile for that app and enforced it but after enforcing, the ...
0
votes
0answers
90 views

apparmor and fsck showing up late in syslogs and causing usb driver crash

Running 64 bit 12.04 LTS on an x86 I have an intermittent touchscreen usb driver crash I'm trying to isolate and it's giving me fits. I've been able to isolate three occurrences of the problem in ...
0
votes
0answers
44 views

Why does the system freeze when mounting disk images

Recently I tried to mount an ISO disk image to use with KVM. Immediately the system froze (mouse stopped, time stopped, music skipped). I tried mounting it with Disk Image Mounter and from the ...
0
votes
0answers
39 views

How do I reinstall the default Apparmor Chromium profile in Ubuntu 14.04

I tried using 'aa-logprof' to modify the default Apparmor Chromium profile (since it doesn't work), but I think I may have messed up the profile because after editing the profile the 'aa-enforce' did ...
0
votes
0answers
116 views

Chromium doesn't start if Apparmor is enforced in Ubuntu 14.04.3

If I do: aa-enforce /etc/apparmor.d/usr.bin.chromium-browser Chromium launcher icon goes bright & fade for sometime and Chromium doesn't start. However, if I do this: aa-complain /etc/...
3
votes
0answers
161 views

How can I allow macchanger to run on ubuntu touch/apparmor?

I'm trying to run macchanger from the terminal application of an ubuntu touch device to avoid unscrupulous 3rd parties(i.e. wifi providers) from tracing my mac address. However it fails miserably with ...
5
votes
2answers
4k views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
1
vote
1answer
356 views

Disabling AppArmor for KVM

I'm trying to take an external snapshot of my KVM guest using the following script: DOMAIN=test-snapshots.programster.org SNAPSHOT_NAME=snap3 STATE_FILE="/media/kvm/test-snapshots/mem-snap.qcow2" ...
1
vote
0answers
63 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
0
votes
0answers
49 views

Deactivate apparmor and activate tomoyo or akari on minimal ubuntu?

I have a minimal version of Ubuntu 15.10 running on my Pentium 3 PC. The only things I have installed on it are Lubuntu-minimal,i3wm,Firefox and Dolphin. I was wondering if there are any tutorials on ...
16
votes
6answers
29k views

How to secure ubuntu server from bruteforce ssh attacks?

I have my passwords secure, but I heard people complaining about perfomance of a server going down drastically when a bruteforce attack is taking place. How can I secure my ubuntu 10.10 server from ...
8
votes
1answer
17k views

How to allow bind in app armor?

Question: I did setup bind9 as described here: http://ubuntuforums.org/showthread.php?p=12149576#post12149576 Now I have a little problem with apparmor: If I switch it off, it works. If apparmor ...
0
votes
1answer
30 views

AppArmor for Dropbox

I'm trying to find an apparmor profile template for limiting dropbox actions to my files. If possible, I would also like to provent it from trying to sync .git directories, due their huge number of ...
2
votes
0answers
52 views

Can AppArmor have default policies for all applications without profiles?

Is it possible to deny all applications network access and then allow a select few explicitly defined applications all network access?
0
votes
1answer
351 views

Libvirt Libvirtd virtualbox remote virsh list --all empty

Good afternoon, first of all excuse my english i'am a foreigner, and it's my first post... I got some trouble using virtualbox and libvirt on a LTS 14.04. I try to do a home sandbox with cuckoo (...
0
votes
1answer
214 views

debootstrap nested in the LXC container fails to mount proc because of apparmor

The command that is run inside an amd64 LXC container: debootstrap --arch armhf --foreign --variant=buildd --components=main,restricted,universe,multiverse vivid /var/lib/schroot/chroots/vivid-armhf ...
0
votes
0answers
24 views

Ubuntu SDK AppArmor issues with opening CSS/JS files from filesystem

I'm trying to create a new app using HTML5/JavaScript with Ubuntu SDK and my new Ubuntu Touch phone. I've managed to run it on my phone, but it doesn't load any styling information and without ...
3
votes
1answer
170 views

AppArmor blocks logging set up through iptables for guest account - How to enable?

To log the internet usage (visited URLs) of my local guest account, I asked the question Monitor visited websites of guest account through any browser and after assigning the guest account the fixed ...
1
vote
2answers
209 views

Monitor visited websites of guest account through any browser

I want to know which websites/URLs are visited by users of my home computer's guest account. Is there a way to log this and save it as nicely formatted list to the disk? I only need date/time and ...
2
votes
2answers
544 views

Apparmor problem: Icedtea plugin freezes firefox (35.0.1)

EDIT5: finally it's probably is an Apparmor problem. /usr/lib/firefox/firefox{,*[^s][^h]} is indeed in complain mode, but /usr/lib/firefox/firefox{,*[^s][^h]}//browser_java /usr/lib/firefox/...
0
votes
0answers
201 views

apparmor error apparmor filesystem is not mounted

I installed apparmor with sudo apt-get install apparmor-profile on terminal. successfully installed apparmor, I typed sudo apparmor_status apparmor module is loaded. apparmor filesystem is not ...
0
votes
0answers
16 views

I have accidentally uninstalled Apparmor

I have accidentally uninstalled apparmor, i don't know how to reinstall it. I have made ''sudo apt-get install apparmor'' But ''update-rc.d -f apparmor'' has not been installed, Why? Could ...
0
votes
0answers
45 views

AppArmor causing “Error: Unable to initialize GTK+, is DISPLAY set properly?”

I am trying to create an AppArmor profile for a proprietary (not open-source single-file native Linux binary) application. And even if I allow each and every thing it tries to do in the profile, it ...
0
votes
0answers
65 views

How to confine an application written in Java with AppArmor?

May this be possible I would like to confine a particular Java application rather than the whole JVM. The answer to this question suggests it's possible. I have been highly successful testing the ...
0
votes
0answers
26 views

Why does AppArmor not block a new application installed manually to /opt?

I have just installed some proprietary apps to /opt (by creating directories and extracting archives with binaries there). And these apps have had no problems reaching the Internet or doing anything ...
4
votes
1answer
293 views

AppArmor Error: “invalid VM definition” after starting lxc on updated version of libvirt (1.2.12)

I am trying to start an LXC on a newer version of libvirtd but it fails to start with the following error: $ virsh -c lxc: start textlxc error: Failed to start domain testlxc error: internal error: ...
2
votes
1answer
1k views

Ubuntu 15.10. Failed to start LSB: AppArmor initialization

I recently updated to Ubuntu 15.10. I am now getting a failed boot with the following message: Failed to start LSB: AppArmor initialization How can I further diagnose and fix this problem?
1
vote
1answer
1k views

AppArmor with cupsd denied in logs

I was updating the OS today (security patches), when I found something strange in the syslog: apparmor="DENIED" operation="signal" profile="/usr/sbin/cupsd" pid=2483 comm="cupsd" requested_mask="send"...
0
votes
0answers
15 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
0
votes
1answer
1k views

AppArmor reinstall fails

I use apparmor together with libapache2-mod-apparmor to sandbox some websites. However After a recent reinstall it stopped working. I keep getting this error: Setting up apparmor (2.7.0~beta1+bzr1774-...
1
vote
0answers
101 views

Cannot update ClamAV via freshclam after installing apparmor

I searched but didn't find an exact answer ... here is my problem: Until now updating freshclam virus definitions for clamav was fine, but after installing apparmor, freshclam does not update. I get ...
-2
votes
1answer
26 views

how to deactivate apparmor profiles which i deleted

ah I deleted the profiles for some of my programs. now i want to deactivate them but no avail. when first i try to disable the profile for example by sudo apparmor_parser -R /etc/apparmor.d/usr....
1
vote
2answers
520 views

SLAPd - TLS not working / apparmor Errors

I've been trying to get LDAP working and set up for a few days now. The real head scratcher is that everything went fine until I got to the point of setting up TLS. I was using this guide from the ...
2
votes
1answer
35 views

Sporadic messages output to console after logging in

Coming right from a fresh install of Ubuntu 14.04 Minimal/Netboot (plus some small utilities like acpid, wicd-curses, etc.), after logging in, I occasionally get floating messages (the kind typically ...
1
vote
2answers
83 views

How can I secure Spotify with AppArmor?

I have Spotify installed from their repo, by following these instructions. But I am concerned about the security ramifications of having proprietary code running on my machine - since it's not ...
0
votes
0answers
68 views

apparmor breaks the phone?

I've tried to remove apparmor (using apt-get remove apparmor from terminal) and now the phone doesn't boot anymore. Any idea how to repair it? The apparmor didn't seem to get removed completely due an ...
2
votes
1answer
444 views

the aa-enforce command for apparmor results in a “command not found” error

I am trying to enable the apparmor profile for firefox, but when i enter sudo aa-enforce /etc/apparmor.d/usr.bin.firefox i get a aa-enforce command not found message. apparmor_status indicates ...
0
votes
0answers
45 views

Ubuntu AppArmor default profiles

Could anyone please list aa-status for fresh (or simply with AppArmor unchanged) installation of Ubuntu 15.04? I set up to much profiles from packages and need to bring it do default state.