AppArmor is a Linux Security Module

learn more… | top users | synonyms

4
votes
1answer
98 views

How is the guest account prevented from using su and sudo?

It's already known that the guest account can't use su or sudo: Why is su disabled from guest sessions? Sudo not available in guest login How is this done? My guess would be apparmor. However, ...
4
votes
1answer
383 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove read/...
2
votes
1answer
235 views

AppArmor denial when trying to open file using content hub

When trying to open a file using content hub using C++ I get these errors: Opening with peer com.ubuntu.music_music_2.1.857 Sdk-Launcher> Application was resumed Sdk-Launcher> There has been a ...
2
votes
1answer
357 views

How can I put tomcat under apparmor?

For security reasons, I want to put Tomcat under apparmor. The Ubuntu server(12.04 LTS) guide has a good explanation about apparmor, but I am not sure what is the correct way of creating a profile for ...
1
vote
1answer
1k views

AppArmor with cupsd denied in logs

I was updating the OS today (security patches), when I found something strange in the syslog: apparmor="DENIED" operation="signal" profile="/usr/sbin/cupsd" pid=2483 comm="cupsd" requested_mask="send"...
1
vote
1answer
571 views

Is there a good apparmor profile for VirtualBox?

Is there any apparmor profile for VirtualBox that works both in normal and guest accounts for 12.04? Where can I get it? Or maybe its code? Is there any other way to protect my VirtualBox from (...
0
votes
1answer
36 views

Start firefox using apparmor (for extra security)

I'm having some trouble starting firefox with apparmor. Here's what I've run: $ sudo aa-enforce /etc/apparmor.d/usr.bin.firefox $ firefox /usr/lib/firefox/firefox: error while loading shared ...
0
votes
1answer
211 views

debootstrap nested in the LXC container fails to mount proc because of apparmor

The command that is run inside an amd64 LXC container: debootstrap --arch armhf --foreign --variant=buildd --components=main,restricted,universe,multiverse vivid /var/lib/schroot/chroots/vivid-armhf ...
0
votes
1answer
25 views

Does apparmor in enforce mode still logs?

I'm using apparmor with Firefox (enforce). I know that leaving in complain mode, apparmor will log what a certain program is doing. But I would like to know if it's possible to turn the "enforce" ...
0
votes
1answer
98 views

Ubuntu Touch AppArmor Kernel Patches

new to Ubuntu development: I am porting Ubuntu touch to my own device. There are many different commits related to AppArmor on https://developer.ubuntu.com/en/start/ubuntu-for-devices/porting-new-...
0
votes
1answer
159 views

How to make non-ascii-armored public key from ascii-armored secret key

I have old key pair (GnuPG keys), both only ascii-armored 1 fresh Ubuntu-Desktop 14.04 installation How can I make a non-ascii armored public key from the old secret key?
0
votes
1answer
100 views

Allow folder in all AppArmor profiles?

I want to put all my modified ubuntu server configurations files (/etc/...) in one folder via symbolic links. However, it's annoying having to write the same line in all apparmor profiles. Is there ...
0
votes
1answer
564 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
0
votes
1answer
7k views

mysql: unrecognized service (apparmor)

Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this question)[http://askubuntu.com/questions/224/how-to-i-move-mysql-...
0
votes
1answer
96 views

What happens if I delete a profile in apparmor

I would like to what happens a program if the apparmor profile associated with it is deleted. Would it run as if it had unconstrained access?
0
votes
1answer
238 views

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.)

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.) without patvhing myself the kernel? thanks answer: https://launchpad.net/ubuntu/precise/...
0
votes
1answer
285 views

Where can I find books or articles about iptables and apparmor?

Where can I find a book or articles that doesnt tell me how to do a ls. Im looking for one where i can learn about: -iptables -apparmor I know there is ufw and gufw and no gui for app armor. I want ...
3
votes
0answers
161 views

How can I allow macchanger to run on ubuntu touch/apparmor?

I'm trying to run macchanger from the terminal application of an ubuntu touch device to avoid unscrupulous 3rd parties(i.e. wifi providers) from tracing my mac address. However it fails miserably with ...
3
votes
0answers
449 views

How to use Firefox AppArmor profile with IcedTea Java plugin on Ubuntu 14.04?

Whenever I set up Ubuntu on a new system, I active the default AppArmor profile for Firefox via sudo aa-enforce /etc/apparmor.d/usr.bin.firefox Doing this on Ubuntu 14.04, however, makes Java ...
3
votes
0answers
428 views

Another apparmor / mysql wont install

I am trying to config another instance of mysql on my present but i can't mysql_install_db --user=mysql --datadir=/var/lib/mysql2 Installing MySQL system tables... ERROR: 1005 Can't create table '...
2
votes
0answers
216 views

Apparmor KVM Ubuntu 14

I am running Ubuntu 14.10. I am trying to install KVM guest. When I try to do so with VNC I get following apparmor error in syslog: kernel: [ 3016.448241] audit: type=1400 audit(1423018183.349:51): ...
2
votes
0answers
52 views

Can AppArmor have default policies for all applications without profiles?

Is it possible to deny all applications network access and then allow a select few explicitly defined applications all network access?
2
votes
0answers
310 views

How to change apparmor logging file?

Apparmor logging to syslog by default. How to change apparmor config to logging to /var/log/apparmor.log for example?
2
votes
0answers
189 views

Hide Skype from panel with apparmor and keep links in chat openable

To hide Skype from unity panel we can add file /etc/apparmor.d/usr.bin.skype with such content: # Last Modified: Tue Jun 12 03:49:49 2012 by izx # REPOSITORY: http://apparmor.test.opensuse.org/...
1
vote
0answers
62 views

Confining wine and windows apps to ~/.wine using apparmor

I'm trying to write an apparmor profile to protect against windows malware run via wine. As I understand it, unless wine is run as root, it's not possible for windows apps to modify system files, but ...
1
vote
0answers
101 views

Cannot update ClamAV via freshclam after installing apparmor

I searched but didn't find an exact answer ... here is my problem: Until now updating freshclam virus definitions for clamav was fine, but after installing apparmor, freshclam does not update. I get ...
1
vote
0answers
249 views

Have localhost with dual boot (Windows/Ubuntu) share htdocs & mysql databases with XAMPP

I just got a new machine with dual boot Ubuntu+Windows 8.1 and set up a localhost using XAMPP in a way that allows me to edit and preview the files on both OSes (so htdocs and mysql databases have to ...
1
vote
0answers
87 views

Problem with Apparmor

I checked the status of Apparmor, and got this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
1
vote
0answers
108 views

Allow sudo in default guest account

I am trying to run Microsoft Office for some public workstations. I have added the following entry to my sudoers file: %win ALL=(windows) NOPASSWD: /usr/share/playonlinux/ /home/windows/.PlayOnLinux ...
1
vote
0answers
135 views

AppArmor on BeagleBoard Black (and probably other ARMv7 devices)

I've installed Ubuntu onto my BeagleBoard, using the instructions at http://www.elinux.org/BeagleBoardUbuntu . This runs the ARM version of Ubuntu 14.04. This all went to plan and it worked, and I ...
1
vote
0answers
364 views

Suspend broken: pm-suspend fails due to /sys/power/* being a Read-only file system

My System 76 laptop running 14.04 won't suspend. Running sudo pm-suspend fails with the following in /var/log/pm-suspend.log: Running hook /usr/lib/pm-utils/sleep.d/94cpufreq suspend suspend: /usr/...
1
vote
0answers
912 views

apparmor=“DENIED”

I get loads of error messages like this in dmesg [613107.890167] type=1400 audit(1402488663.041:108): apparmor="DENIED" operation="exec" profile="/usr/bin/evince-thumbnailer//sanitized_helper" name="/...
0
votes
0answers
10 views

Can't run show tabels; with apparmor and mysql

I've moved my mysql directory and added some entries into apparmor to reflect this. I thought is was working fine.. The application (Jira) connects and works perfectly. But I noticed when trying to ...
0
votes
0answers
124 views

14.04 to 16.04 upgrade hung

My server upgrade was going fine until it seems to have hung. I logged on to another terminal and I see the following message repeating every few seconds in /var/log/syslog: May 2 13:17:56 www ...
0
votes
0answers
19 views

Deny guest user access to the Internet except to one address

I guess that an AppArmor profile has to be edited to archive that, but I'm lost on how to do it. If it is possible through an ufw or iptables rule I would be happy as well. Don't forget that it's ...
0
votes
0answers
90 views

apparmor and fsck showing up late in syslogs and causing usb driver crash

Running 64 bit 12.04 LTS on an x86 I have an intermittent touchscreen usb driver crash I'm trying to isolate and it's giving me fits. I've been able to isolate three occurrences of the problem in ...
0
votes
0answers
44 views

Why does the system freeze when mounting disk images

Recently I tried to mount an ISO disk image to use with KVM. Immediately the system froze (mouse stopped, time stopped, music skipped). I tried mounting it with Disk Image Mounter and from the ...
0
votes
0answers
39 views

How do I reinstall the default Apparmor Chromium profile in Ubuntu 14.04

I tried using 'aa-logprof' to modify the default Apparmor Chromium profile (since it doesn't work), but I think I may have messed up the profile because after editing the profile the 'aa-enforce' did ...
0
votes
0answers
88 views

Need root access for some actions in ubuntu phone app

I am trying to develop an ubuntu phone app that does some things that are not allowed by app armor. If I connect to my phone by adb shell I can do this things without problems and without root. My ...
0
votes
0answers
49 views

Deactivate apparmor and activate tomoyo or akari on minimal ubuntu?

I have a minimal version of Ubuntu 15.10 running on my Pentium 3 PC. The only things I have installed on it are Lubuntu-minimal,i3wm,Firefox and Dolphin. I was wondering if there are any tutorials on ...
0
votes
0answers
115 views

Chromium doesn't start if Apparmor is enforced in Ubuntu 14.04.3

If I do: aa-enforce /etc/apparmor.d/usr.bin.chromium-browser Chromium launcher icon goes bright & fade for sometime and Chromium doesn't start. However, if I do this: aa-complain /etc/...
0
votes
0answers
24 views

Ubuntu SDK AppArmor issues with opening CSS/JS files from filesystem

I'm trying to create a new app using HTML5/JavaScript with Ubuntu SDK and my new Ubuntu Touch phone. I've managed to run it on my phone, but it doesn't load any styling information and without ...
0
votes
0answers
200 views

apparmor error apparmor filesystem is not mounted

I installed apparmor with sudo apt-get install apparmor-profile on terminal. successfully installed apparmor, I typed sudo apparmor_status apparmor module is loaded. apparmor filesystem is not ...
0
votes
0answers
16 views

I have accidentally uninstalled Apparmor

I have accidentally uninstalled apparmor, i don't know how to reinstall it. I have made ''sudo apt-get install apparmor'' But ''update-rc.d -f apparmor'' has not been installed, Why? Could ...
0
votes
0answers
45 views

AppArmor causing “Error: Unable to initialize GTK+, is DISPLAY set properly?”

I am trying to create an AppArmor profile for a proprietary (not open-source single-file native Linux binary) application. And even if I allow each and every thing it tries to do in the profile, it ...
0
votes
0answers
64 views

How to confine an application written in Java with AppArmor?

May this be possible I would like to confine a particular Java application rather than the whole JVM. The answer to this question suggests it's possible. I have been highly successful testing the ...
0
votes
0answers
26 views

Why does AppArmor not block a new application installed manually to /opt?

I have just installed some proprietary apps to /opt (by creating directories and extracting archives with binaries there). And these apps have had no problems reaching the Internet or doing anything ...
0
votes
0answers
15 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
0
votes
0answers
68 views

apparmor breaks the phone?

I've tried to remove apparmor (using apt-get remove apparmor from terminal) and now the phone doesn't boot anymore. Any idea how to repair it? The apparmor didn't seem to get removed completely due an ...
0
votes
0answers
45 views

Ubuntu AppArmor default profiles

Could anyone please list aa-status for fresh (or simply with AppArmor unchanged) installation of Ubuntu 15.04? I set up to much profiles from packages and need to bring it do default state.