AppArmor is a Linux Security Module

learn more… | top users | synonyms

73
votes
3answers
16k views

What is apparmor?

I hear a lot of talk about apparmor, I want to know the following: What is apparmor? How does apparmor work?
16
votes
6answers
29k views

How to secure ubuntu server from bruteforce ssh attacks?

I have my passwords secure, but I heard people complaining about perfomance of a server going down drastically when a bruteforce attack is taking place. How can I secure my ubuntu 10.10 server from ...
18
votes
2answers
2k views

Is it a bad idea to run SELinux and AppArmor at the same time?

My corporate policy says that Linux boxes must be secured with SELinux (so that a security auditor can check the 'yes, we're extremely secure!' checkbox for each server). I had hoped to take ...
2
votes
1answer
1k views

Apparmor not starting with kernel LSM error [closed]

Starting apparmor on a Ubuntu Lucid Lynx gives the following: user@host:~$ sudo /etc/init.d/apparmor start * Starting AppArmor profiles * AppArmor not available as kernel LSM. ...fail! ...
30
votes
15answers
61k views

Can't start mysql - mysql respawning too fast, stopped

Today I did a fresh install of ubuntu 12.04 and went about setting up my local development environment. I installed mysql and edited /etc/mysql/my.cnf to optimise InnoDB but when I try to restart ...
15
votes
2answers
3k views

How can I tell that apparmor is working?

Some questions I want answered in the answer: How do I know if apparmor is running? How can I tell if it's working well?
4
votes
1answer
3k views

Where do I get the AppArmor 2.4 compatibility patch?

I just compiled the 2.6.39-rc1 kernel and AppArmor complains about a missing /sys interface (plus, it slows down the boot). Where do I get the AppArmor 2.4 compatibility patch AppArmor asks for?
1
vote
2answers
214 views

Monitor visited websites of guest account through any browser

I want to know which websites/URLs are visited by users of my home computer's guest account. Is there a way to log this and save it as nicely formatted list to the disk? I only need date/time and ...
8
votes
1answer
17k views

How to allow bind in app armor?

Question: I did setup bind9 as described here: http://ubuntuforums.org/showthread.php?p=12149576#post12149576 Now I have a little problem with apparmor: If I switch it off, it works. If apparmor ...
3
votes
2answers
5k views

Why do I have to enable the AppArmor profile for Firefox? Why isn't it “on” by default?

I have a pretty standard default install of 11.10 (Unity 3D). I'm trying to understand a bit about AppArmor. sudo aa-status shows me that the available Firefox profile isn't being enforced (since it ...
6
votes
1answer
753 views

Is troubleshooting AppArmor with 'teardown' unsafe?

I understand there is a safer, more targeted way to troubleshoot AppArmor's possible contribution to an issue than completely stopping the service and tearing down AppArmor profiles. Can someone give ...
6
votes
2answers
1k views

What does Firefox AppArmor restrict/allow?

I know the AppArmor profiles resides in /etc/apparmor.d/, but I do not know how to interpret it. Any translation would be enlightening.
6
votes
1answer
3k views

apt-get hang at Rsyslog

When I try to install something, there is a hang, I don't know if it's a bug or something else... root@computer:~# apt-get install Reading package list... Done Building dependancy tree Reading state ...
3
votes
0answers
449 views

How to use Firefox AppArmor profile with IcedTea Java plugin on Ubuntu 14.04?

Whenever I set up Ubuntu on a new system, I active the default AppArmor profile for Firefox via sudo aa-enforce /etc/apparmor.d/usr.bin.firefox Doing this on Ubuntu 14.04, however, makes Java ...
3
votes
1answer
170 views

AppArmor blocks logging set up through iptables for guest account - How to enable?

To log the internet usage (visited URLs) of my local guest account, I asked the question Monitor visited websites of guest account through any browser and after assigning the guest account the fixed ...
1
vote
1answer
7k views

Ubuntu 12.04 not loading after installing updates - initctl: Event failed

After updating my Ubuntu installation I get a blank screen when try to load it. I have dual boot with Windows which works fine. Going into recovery mode -> resume normal boot gives me the following ...
6
votes
1answer
610 views

Can apparmor restrict interpreted languages?

For interpreted/vm languages(e.g. python, java, shell scripts) can apparmor be set to only confine a particular script or program? If so, how?
5
votes
3answers
10k views

Unable to start mysql server after update

Today I updated the system, and I cant start the mysql server: I'm getting the following error: Aug 14 14:32:09 VULTURUS kernel: [ 1996.413190] init: mysql main process (14122) terminated with ...
5
votes
2answers
547 views

How to prevent users from installing non-free software?

Is it possible to disable installation of non-free or proprietary softwares and applications in Ubuntu?
3
votes
0answers
163 views

How can I allow macchanger to run on ubuntu touch/apparmor?

I'm trying to run macchanger from the terminal application of an ubuntu touch device to avoid unscrupulous 3rd parties(i.e. wifi providers) from tracing my mac address. However it fails miserably with ...
2
votes
1answer
4k views

How to fix apparmor=“DENIED” for telepathy-mission-control-5 under Ubuntu 14.04?

Just installed Ubuntu 14.04 LTS a week ago and a few programs for my work & fun: nginx server, rabbitmq server, mysql server php-fpm, hhvm sublime-text, mysql workbench hplib (for printer/...