AppArmor is a Linux Security Module

learn more… | top users | synonyms

2
votes
2answers
301 views

Tor not working after update

Yesterday I updated my Ubuntu 14.04 LTS and after that Tor stopped working : When I try to run Tor using command sudo service tor start it gives an error aa-exec: ERROR: profile 'system_tor' does ...
0
votes
2answers
126 views

Skype doesn't see my webcam

I've got Logitech C270 (/dev/video0) that is seen by Cheese in Xubuntu 14.04, but Skype doesn't recognize it. What can I do? Should I blame my apparmor profile?
4
votes
1answer
216 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
1
vote
1answer
148 views

How can I put tomcat under apparmor?

For security reasons, I want to put Tomcat under apparmor. The Ubuntu server(12.04 LTS) guide has a good explanation about apparmor, but I am not sure what is the correct way of creating a profile for ...
1
vote
1answer
2k views

Bind9 - openssl problem

when I try to start bind9; simply fail because of chroot & openssl /etc/init.d/bind9 start log messages; Feb 17 08:26:27 ISTVS2024 named[2440]: initializing DST: openssl failure Feb 17 ...
1
vote
1answer
375 views

Is there a good apparmor profile for VirtualBox?

Is there any apparmor profile for VirtualBox that works both in normal and guest accounts for 12.04? Where can I get it? Or maybe its code? Is there any other way to protect my VirtualBox from ...
0
votes
1answer
43 views

Having problems with Samba4/BIND9_DLZ : AppArmor permission issue

(12.04.5LTS Server) Have a user "named", configured in the bind9 service to start. My /etc/apparmor.d/local/usr.sbin.named file /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab r, ...
0
votes
1answer
16 views

How to make non-ascii-armored public key from ascii-armored secret key

I have old key pair (GnuPG keys), both only ascii-armored 1 fresh Ubuntu-Desktop 14.04 installation How can I make a non-ascii armored public key from the old secret key?
0
votes
1answer
75 views

SLAPd - TLS not working / apparmor Errors

I've been trying to get LDAP working and set up for a few days now. The real head scratcher is that everything went fine until I got to the point of setting up TLS. I was using this guide from the ...
0
votes
1answer
245 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
0
votes
1answer
4k views

mysql: unrecognized service (apparmor)

Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this ...
0
votes
1answer
63 views

What happens if I delete a profile in apparmor

I would like to what happens a program if the apparmor profile associated with it is deleted. Would it run as if it had unconstrained access?
0
votes
1answer
230 views

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.)

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.) without patvhing myself the kernel? thanks answer: ...
0
votes
1answer
259 views

Where can I find books or articles about iptables and apparmor?

Where can I find a book or articles that doesnt tell me how to do a ls. Im looking for one where i can learn about: -iptables -apparmor I know there is ufw and gufw and no gui for app armor. I want ...
0
votes
1answer
767 views

AppArmor reinstall fails

I use apparmor together with libapache2-mod-apparmor to sandbox some websites. However After a recent reinstall it stopped working. I keep getting this error: Setting up apparmor ...
2
votes
0answers
169 views

How to use Firefox AppArmor profile with IcedTea Java plugin on Ubuntu 14.04?

Whenever I set up Ubuntu on a new system, I active the default AppArmor profile for Firefox via sudo aa-enforce /etc/apparmor.d/usr.bin.firefox Doing this on Ubuntu 14.04, however, makes Java ...
2
votes
0answers
169 views

Hide Skype from panel with apparmor and keep links in chat openable

To hide Skype from unity panel we can add file /etc/apparmor.d/usr.bin.skype with such content: # Last Modified: Tue Jun 12 03:49:49 2012 by izx # REPOSITORY: ...
2
votes
0answers
278 views

Another apparmor / mysql wont install

I am trying to config another instance of mysql on my present but i can't mysql_install_db --user=mysql --datadir=/var/lib/mysql2 Installing MySQL system tables... ERROR: 1005 Can't create table ...
1
vote
0answers
22 views

How to customize locally an apparmor profile?

I would like to run Firefox with aa-enforce(d) apparmor profile. This works fine, except I have a plugin that need access to the keyring via dbus. When the plugin ...
1
vote
0answers
19 views

Can AppArmor have default policies for all applications without profiles?

Goal: Deny all applications network access and all network access for one or more explicitly specified applications.
1
vote
0answers
49 views

How to change apparmor logging file?

Apparmor logging to syslog by default. How to change apparmor config to logging to /var/log/apparmor.log for example?
1
vote
0answers
60 views

Apparmor and Ecrypfs trouble with encrypted ~/Private directory

In my system I made an encrypted ~/Private directory by ecryptfs-utils package. It works good, but I have a problem with apparmor. Into the Private folder I moved some home directories, like .local, ...
1
vote
0answers
91 views

apparmor don't start with 12.04 LTS 64Bit

I installed with apt-get install apparmor-utils apparmor-profiles apparmor-notify but even after a reboot aa-status tells me apparmor module is not loaded. cant find entry in syslog and ...
1
vote
0answers
324 views

Java can't find libjli.so despite ld.so.conf entry

I'm trying to get Java to run under AppArmor on 12.04 by copying the executable to /sandbox/java. (Symlinking is not an option because AppArmor fails on symlinks.) Currently, it won't run because it ...
1
vote
0answers
134 views

How to grant access to raw partition for lxc container

I'm using the Linux Containers as set by default in the package lxc. I'd like to give one of the container an exclusive access to one partition. Does anybody know, how to configure it? I'd like to ...
0
votes
0answers
17 views

How does AppArmor secure Ubuntu?

How does AppArmor secure the Ubuntu system? I also want to know if AppArmor is still being developed and maintaind, thanks!
0
votes
0answers
21 views

Is it safe to disable apparmor profile?

In this anwser I've been told I can get rid of annoying error messages by disableing AppArmor profile for telepathy-mission-control-5. However, I suspect the profile is enabled by default for a ...
0
votes
0answers
78 views

cups-pdf unable to lookup user

I am using cups-pdf for many years now without problems. But now, its seems to be broken. Ubuntu version: Ubuntu 14.04.1 LTS I try the same setup on a fresh installed server, with same problems. Set ...
0
votes
0answers
29 views

System hang during Apparmor update

Just ran sudo apt-get update && apt-get upgrade on my 12.04 server. Everything seemed to be going fine until this point: Setting up apparmor-profiles (2.7.102-0ubuntu3.10) ... It's been ...
0
votes
0answers
156 views

Suspend broken: pm-suspend fails due to /sys/power/* being a Read-only file system

My System 76 laptop running 14.04 won't suspend. Running sudo pm-suspend fails with the following in /var/log/pm-suspend.log: Running hook /usr/lib/pm-utils/sleep.d/94cpufreq suspend suspend: ...
0
votes
0answers
123 views

Local folder for specific MySQL databases with symlinks

Moving specific MySQL databases under home folder using symlink used to work in the past for me (maybe before upgrading from 13.10 to 14.04) but now, following the same procedure, it just does not ...
0
votes
0answers
1k views

Mysql failed to start

i tried to restore a db backup to a newly created database, suddenly its starts showing error. Can't connect to local MySQL server through socket /var/run/mysqld/mysqld.sock so i checked ...
0
votes
0answers
519 views

apparmor=“DENIED”

I get loads of error messages like this in dmesg [613107.890167] type=1400 audit(1402488663.041:108): apparmor="DENIED" operation="exec" profile="/usr/bin/evince-thumbnailer//sanitized_helper" ...
0
votes
0answers
37 views

Allow folder in all AppArmor profiles?

I want to put all my modified ubuntu server configurations files (/etc/...) in one folder via symbolic links. However, it's annoying having to write the same line in all apparmor profiles. Is there ...
0
votes
0answers
36 views

Lost internet connection after (fail) apparmor installation

Please, I would truly thank any advice on how to solve this issue: I have ubuntu gnome 13.10 64bits and I tried to install apparmor using the normal procedure: sudo add-apt-repository ...
0
votes
0answers
340 views

Apparmor doesn't start with Ubuntu 13.10 64Bit

installed with apt-get install apparmor apt-get install apparmor-utils apparmor-profiles apparmor-notify but even after a reboot aa-status tells me apparmor module is not loaded. ...