AppArmor is a Linux Security Module

learn more… | top users | synonyms

3
votes
2answers
533 views

Tor not working after update

Yesterday I updated my Ubuntu 14.04 LTS and after that Tor stopped working : When I try to run Tor using command sudo service tor start it gives an error aa-exec: ERROR: profile 'system_tor' does ...
1
vote
2answers
3k views

Bind9 - openssl problem

when I try to start bind9; simply fail because of chroot & openssl /etc/init.d/bind9 start log messages; Feb 17 08:26:27 ISTVS2024 named[2440]: initializing DST: openssl failure Feb 17 ...
4
votes
1answer
282 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
2
votes
1answer
102 views

AppArmor denial when trying to open file using content hub

When trying to open a file using content hub using C++ I get these errors: Opening with peer com.ubuntu.music_music_2.1.857 Sdk-Launcher> Application was resumed Sdk-Launcher> There has been a ...
1
vote
1answer
80 views

Ubuntu Touch Development: DBus connection via apparmor-template=unconfined?

I am trying to send DBus messages via Ubuntu Touch C++ application. With configuring default template (no error with unconfined) for Apparmor file my application is getting following error as reply: ...
1
vote
1answer
240 views

How can I put tomcat under apparmor?

For security reasons, I want to put Tomcat under apparmor. The Ubuntu server(12.04 LTS) guide has a good explanation about apparmor, but I am not sure what is the correct way of creating a profile for ...
1
vote
1answer
455 views

Is there a good apparmor profile for VirtualBox?

Is there any apparmor profile for VirtualBox that works both in normal and guest accounts for 12.04? Where can I get it? Or maybe its code? Is there any other way to protect my VirtualBox from ...
0
votes
1answer
43 views

Ubuntu Touch AppArmor Kernel Patches

new to Ubuntu development: I am porting Ubuntu touch to my own device. There are many different commits related to AppArmor on ...
0
votes
1answer
234 views

Having problems with Samba4/BIND9_DLZ : AppArmor permission issue

(12.04.5LTS Server) Have a user "named", configured in the bind9 service to start. My /etc/apparmor.d/local/usr.sbin.named file /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab r, ...
0
votes
1answer
70 views

How to make non-ascii-armored public key from ascii-armored secret key

I have old key pair (GnuPG keys), both only ascii-armored 1 fresh Ubuntu-Desktop 14.04 installation How can I make a non-ascii armored public key from the old secret key?
0
votes
1answer
280 views

SLAPd - TLS not working / apparmor Errors

I've been trying to get LDAP working and set up for a few days now. The real head scratcher is that everything went fine until I got to the point of setting up TLS. I was using this guide from the ...
0
votes
1answer
63 views

Allow folder in all AppArmor profiles?

I want to put all my modified ubuntu server configurations files (/etc/...) in one folder via symbolic links. However, it's annoying having to write the same line in all apparmor profiles. Is there ...
0
votes
1answer
401 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
0
votes
1answer
5k views

mysql: unrecognized service (apparmor)

Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this ...
0
votes
1answer
68 views

What happens if I delete a profile in apparmor

I would like to what happens a program if the apparmor profile associated with it is deleted. Would it run as if it had unconstrained access?
0
votes
1answer
233 views

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.)

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.) without patvhing myself the kernel? thanks answer: ...
0
votes
1answer
275 views

Where can I find books or articles about iptables and apparmor?

Where can I find a book or articles that doesnt tell me how to do a ls. Im looking for one where i can learn about: -iptables -apparmor I know there is ufw and gufw and no gui for app armor. I want ...
0
votes
1answer
913 views

AppArmor reinstall fails

I use apparmor together with libapache2-mod-apparmor to sandbox some websites. However After a recent reinstall it stopped working. I keep getting this error: Setting up apparmor ...
3
votes
0answers
346 views

How to use Firefox AppArmor profile with IcedTea Java plugin on Ubuntu 14.04?

Whenever I set up Ubuntu on a new system, I active the default AppArmor profile for Firefox via sudo aa-enforce /etc/apparmor.d/usr.bin.firefox Doing this on Ubuntu 14.04, however, makes Java ...
2
votes
0answers
134 views

Apparmor KVM Ubuntu 14

I am running Ubuntu 14.10. I am trying to install KVM guest. When I try to do so with VNC I get following apparmor error in syslog: kernel: [ 3016.448241] audit: type=1400 audit(1423018183.349:51): ...
2
votes
0answers
28 views

Can AppArmor have default policies for all applications without profiles?

Goal: Deny all applications network access and all network access for one or more explicitly specified applications.
2
votes
0answers
153 views

How to change apparmor logging file?

Apparmor logging to syslog by default. How to change apparmor config to logging to /var/log/apparmor.log for example?
2
votes
0answers
181 views

Hide Skype from panel with apparmor and keep links in chat openable

To hide Skype from unity panel we can add file /etc/apparmor.d/usr.bin.skype with such content: # Last Modified: Tue Jun 12 03:49:49 2012 by izx # REPOSITORY: ...
2
votes
0answers
349 views

Another apparmor / mysql wont install

I am trying to config another instance of mysql on my present but i can't mysql_install_db --user=mysql --datadir=/var/lib/mysql2 Installing MySQL system tables... ERROR: 1005 Can't create table ...
1
vote
0answers
27 views

Problem with Apparmor

I checked the status of Apparmor, and got this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
1
vote
0answers
66 views

AppArmor on BeagleBoard Black (and probably other ARMv7 devices)

I've installed Ubuntu onto my BeagleBoard, using the instructions at http://www.elinux.org/BeagleBoardUbuntu . This runs the ARM version of Ubuntu 14.04. This all went to plan and it worked, and I ...
1
vote
0answers
260 views

Suspend broken: pm-suspend fails due to /sys/power/* being a Read-only file system

My System 76 laptop running 14.04 won't suspend. Running sudo pm-suspend fails with the following in /var/log/pm-suspend.log: Running hook /usr/lib/pm-utils/sleep.d/94cpufreq suspend suspend: ...
1
vote
0answers
678 views

apparmor=“DENIED”

I get loads of error messages like this in dmesg [613107.890167] type=1400 audit(1402488663.041:108): apparmor="DENIED" operation="exec" profile="/usr/bin/evince-thumbnailer//sanitized_helper" ...
0
votes
0answers
33 views

AppArmor with cupsd denied in logs

I was updating the OS today (security patches), when I found something strange in the syslog: apparmor="DENIED" operation="signal" profile="/usr/sbin/cupsd" pid=2483 comm="cupsd" ...
0
votes
0answers
29 views

AppArmor Error: “invalid VM definition” after starting lxc on updated version of libvirt (1.2.12)

I am trying to start an LXC on a newer version of libvirtd but it fails to start with the following error: $ virsh -c lxc: start textlxc error: Failed to start domain testlxc error: internal error: ...
0
votes
0answers
41 views

Firefox Says it's Not the Default Browser & App Armor Preventing Setting Default

Ever since upgrading to Vivid, every time I start Firefox it tells me that Firefox is not my default browser, and asks if I would like to set it as the default. The odd thing is that when I go to ...
0
votes
0answers
48 views

Why does dnsmasq use /bin/dash?

I am running apparmor in enforce mode for most profiles, and I regularly see denied messages like the following one: apparmor="DENIED" operation="exec" profile="/usr/sbin/dnsmasq" name="/bin/dash" ...
0
votes
0answers
50 views

Allow sudo in default guest account

I am trying to run Microsoft Office for some public workstations. I have added the following entry to my sudoers file: %win ALL=(windows) NOPASSWD: /usr/share/playonlinux/ /home/windows/.PlayOnLinux ...
0
votes
0answers
14 views

Setting up logging preferences for bind on 14.04 Server

Is there a preferred way of setting up logging preferences for bind in Ubuntu Server 14.04? I'm trying to add category lame-servers { null; }; But I'm getting a bit confused with different ...
0
votes
0answers
18 views

Start mySQL with AppArmor on reboot

When my Ubuntu server (hosted by Rackspace) is rebooted/restarted, mySQL starts automatically as evidenced by phpMyAdmin working properly. However, my PHP code does not appear to work. When I manually ...
0
votes
0answers
36 views

Apparmor problems

I followed this persons solved question here on how to mount Apparmor: https://forum.backbox.org/general-support/apparmor-is-not-working/. After I did however, I came up with this black screen with ...
0
votes
0answers
65 views

Where do I have to specify Security Policies for Ubuntu Touch applications?

Here https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest I read that I have to fill the manifest.json file included in the package, but I also read that MyApps provides ...
0
votes
0answers
55 views

Can you use QProcess in a Click Packaged Application?

I am just curious whether this is something AppArmor allows or not? My application works fine on the desktop, but I can't get Standard output or error to even display in my app when I run it from the ...
0
votes
0answers
16 views

What security policy group do I need to give a Click Package to download files?

My app downloads files, ideally to the Music Folder. What security policy groups are needed by app armor to accomplish this?
0
votes
0answers
36 views

How does AppArmor secure Ubuntu?

How does AppArmor secure the Ubuntu system? I also want to know if AppArmor is still being developed and maintaind, thanks!
0
votes
0answers
56 views

Is it safe to disable apparmor profile?

In this anwser I've been told I can get rid of annoying error messages by disableing AppArmor profile for telepathy-mission-control-5. However, I suspect the profile is enabled by default for a ...
0
votes
0answers
261 views

cups-pdf unable to lookup user

I am using cups-pdf for many years now without problems. But now, its seems to be broken. Ubuntu version: Ubuntu 14.04.1 LTS I try the same setup on a fresh installed server, with same problems. Set ...
0
votes
0answers
49 views

System hang during Apparmor update

Just ran sudo apt-get update && apt-get upgrade on my 12.04 server. Everything seemed to be going fine until this point: Setting up apparmor-profiles (2.7.102-0ubuntu3.10) ... It's been ...
-1
votes
0answers
29 views

Not sure if I should report a potential secuirty problem

I have been seeing potential suspicious activities on my computer that I think may be linked to what they call clickjacking. I noticed some suspicious activities from apparmor reporting stuff like ...