AppArmor is a Linux Security Module

learn more… | top users | synonyms

4
votes
1answer
348 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
2
votes
1answer
183 views

AppArmor denial when trying to open file using content hub

When trying to open a file using content hub using C++ I get these errors: Opening with peer com.ubuntu.music_music_2.1.857 Sdk-Launcher> Application was resumed Sdk-Launcher> There has been a ...
2
votes
1answer
314 views

How can I put tomcat under apparmor?

For security reasons, I want to put Tomcat under apparmor. The Ubuntu server(12.04 LTS) guide has a good explanation about apparmor, but I am not sure what is the correct way of creating a profile for ...
1
vote
1answer
24 views

Cannot git clone Apparmor kernel patches

Whenever I enter (git clone git://kernel.ubuntu.com/jj/ubuntu-utopic.git) into the terminal, I get this output: Cloning into 'ubuntu-utopic'... fatal: Could not read from remote repository. Please ...
1
vote
1answer
566 views

AppArmor with cupsd denied in logs

I was updating the OS today (security patches), when I found something strange in the syslog: apparmor="DENIED" operation="signal" profile="/usr/sbin/cupsd" pid=2483 comm="cupsd" ...
1
vote
1answer
217 views

Ubuntu Touch Development: DBus connection via apparmor-template=unconfined?

I am trying to send DBus messages via Ubuntu Touch C++ application. With configuring default template (no error with unconfined) for Apparmor file my application is getting following error as reply: ...
1
vote
1answer
526 views

Is there a good apparmor profile for VirtualBox?

Is there any apparmor profile for VirtualBox that works both in normal and guest accounts for 12.04? Where can I get it? Or maybe its code? Is there any other way to protect my VirtualBox from ...
0
votes
1answer
68 views

debootstrap nested in the LXC container fails to mount proc because of apparmor

The command that is run inside an amd64 LXC container: debootstrap --arch armhf --foreign --variant=buildd --components=main,restricted,universe,multiverse vivid /var/lib/schroot/chroots/vivid-armhf ...
0
votes
1answer
74 views

Ubuntu Touch AppArmor Kernel Patches

new to Ubuntu development: I am porting Ubuntu touch to my own device. There are many different commits related to AppArmor on ...
0
votes
1answer
338 views

Having problems with Samba4/BIND9_DLZ : AppArmor permission issue

(12.04.5LTS Server) Have a user "named", configured in the bind9 service to start. My /etc/apparmor.d/local/usr.sbin.named file /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab r, ...
0
votes
1answer
127 views

How to make non-ascii-armored public key from ascii-armored secret key

I have old key pair (GnuPG keys), both only ascii-armored 1 fresh Ubuntu-Desktop 14.04 installation How can I make a non-ascii armored public key from the old secret key?
0
votes
1answer
82 views

Allow folder in all AppArmor profiles?

I want to put all my modified ubuntu server configurations files (/etc/...) in one folder via symbolic links. However, it's annoying having to write the same line in all apparmor profiles. Is there ...
0
votes
1answer
510 views

is apparmor shutting down rsyslogd / syslog?

Protocol of syslog is ending ( shut-down ? ) with output : pluto cracklib: no dictionary update necessary. Aug 19 11:17:23 pluto kernel: [ 8090.193574] audit_printk_skb: 57 callbacks suppressed Aug ...
0
votes
1answer
6k views

mysql: unrecognized service (apparmor)

Many questions on this point but I couldn't any help yet. Mysql was working then I tried to move mysql database directory as (in this ...
0
votes
1answer
89 views

What happens if I delete a profile in apparmor

I would like to what happens a program if the apparmor profile associated with it is deleted. Would it run as if it had unconstrained access?
0
votes
1answer
237 views

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.)

where/how to find the last linux-image patched with apparmor (Kernel needs AppArmor 2.4 compatibility patch.) without patvhing myself the kernel? thanks answer: ...
0
votes
1answer
281 views

Where can I find books or articles about iptables and apparmor?

Where can I find a book or articles that doesnt tell me how to do a ls. Im looking for one where i can learn about: -iptables -apparmor I know there is ufw and gufw and no gui for app armor. I want ...
-2
votes
1answer
17 views

how to deactivate apparmor profiles which i deleted

ah I deleted the profiles for some of my programs. now i want to deactivate them but no avail. when first i try to disable the profile for example by sudo apparmor_parser -R ...
3
votes
0answers
416 views

How to use Firefox AppArmor profile with IcedTea Java plugin on Ubuntu 14.04?

Whenever I set up Ubuntu on a new system, I active the default AppArmor profile for Firefox via sudo aa-enforce /etc/apparmor.d/usr.bin.firefox Doing this on Ubuntu 14.04, however, makes Java ...
3
votes
0answers
402 views

Another apparmor / mysql wont install

I am trying to config another instance of mysql on my present but i can't mysql_install_db --user=mysql --datadir=/var/lib/mysql2 Installing MySQL system tables... ERROR: 1005 Can't create table ...
2
votes
0answers
190 views

Apparmor KVM Ubuntu 14

I am running Ubuntu 14.10. I am trying to install KVM guest. When I try to do so with VNC I get following apparmor error in syslog: kernel: [ 3016.448241] audit: type=1400 audit(1423018183.349:51): ...
2
votes
0answers
42 views

Can AppArmor have default policies for all applications without profiles?

Is it possible to deny all applications network access and then allow a select few explicitly defined applications all network access?
2
votes
0answers
241 views

How to change apparmor logging file?

Apparmor logging to syslog by default. How to change apparmor config to logging to /var/log/apparmor.log for example?
2
votes
0answers
183 views

Hide Skype from panel with apparmor and keep links in chat openable

To hide Skype from unity panel we can add file /etc/apparmor.d/usr.bin.skype with such content: # Last Modified: Tue Jun 12 03:49:49 2012 by izx # REPOSITORY: ...
1
vote
0answers
86 views

How can I allow macchanger to run on ubuntu touch/apparmor?

I'm trying to run macchanger from the terminal application of an ubuntu touch device to avoid unscrupulous 3rd parties(i.e. wifi providers) from tracing my mac address. However it fails miserably with ...
1
vote
0answers
157 views

Have localhost with dual boot (Windows/Ubuntu) share htdocs & mysql databases with XAMPP

I just got a new machine with dual boot Ubuntu+Windows 8.1 and set up a localhost using XAMPP in a way that allows me to edit and preview the files on both OSes (so htdocs and mysql databases have to ...
1
vote
0answers
59 views

Problem with Apparmor

I checked the status of Apparmor, and got this: xubuntu@xubuntu:~$ sudo apparmor_status apparmor module is loaded. 0 profiles are loaded. 0 profiles are in enforce mode. 0 profiles are in complain ...
1
vote
0answers
113 views

AppArmor on BeagleBoard Black (and probably other ARMv7 devices)

I've installed Ubuntu onto my BeagleBoard, using the instructions at http://www.elinux.org/BeagleBoardUbuntu . This runs the ARM version of Ubuntu 14.04. This all went to plan and it worked, and I ...
1
vote
0answers
330 views

Suspend broken: pm-suspend fails due to /sys/power/* being a Read-only file system

My System 76 laptop running 14.04 won't suspend. Running sudo pm-suspend fails with the following in /var/log/pm-suspend.log: Running hook /usr/lib/pm-utils/sleep.d/94cpufreq suspend suspend: ...
1
vote
0answers
815 views

apparmor=“DENIED”

I get loads of error messages like this in dmesg [613107.890167] type=1400 audit(1402488663.041:108): apparmor="DENIED" operation="exec" profile="/usr/bin/evince-thumbnailer//sanitized_helper" ...
0
votes
0answers
9 views

Deactivate apparmor and activate tomoyo or akari on minimal ubuntu?

I have a minimal version of Ubuntu 15.10 running on my Pentium 3 PC. The only things I have installed on it are Lubuntu-minimal,i3wm,Firefox and Dolphin. I was wondering if there are any tutorials on ...
0
votes
0answers
29 views

Chromium doesn't start if Apparmor is enforced in Ubuntu 14.04.3

If I do: aa-enforce /etc/apparmor.d/usr.bin.chromium-browser Chromium launcher icon goes bright & fade for sometime and Chromium doesn't start. However, if I do this: aa-complain ...
0
votes
0answers
10 views

Ubuntu SDK AppArmor issues with opening CSS/JS files from filesystem

I'm trying to create a new app using HTML5/JavaScript with Ubuntu SDK and my new Ubuntu Touch phone. I've managed to run it on my phone, but it doesn't load any styling information and without ...
0
votes
0answers
49 views

apparmor error apparmor filesystem is not mounted

I installed apparmor with sudo apt-get install apparmor-profile on terminal. successfully installed apparmor, I typed sudo apparmor_status apparmor module is loaded. apparmor filesystem is not ...
0
votes
0answers
10 views

I have accidentally uninstalled Apparmor

I have accidentally uninstalled apparmor, i don't know how to reinstall it. I have made ''sudo apt-get install apparmor'' But ''update-rc.d -f apparmor'' has not been installed, Why? Could ...
0
votes
0answers
25 views

AppArmor causing “Error: Unable to initialize GTK+, is DISPLAY set properly?”

I am trying to create an AppArmor profile for a proprietary (not open-source single-file native Linux binary) application. And even if I allow each and every thing it tries to do in the profile, it ...
0
votes
0answers
16 views

How to confine an application written in Java with AppArmor?

May this be possible I would like to confine a particular Java application rather than the whole JVM. The answer to this question suggests it's possible. I have been highly successful testing the ...
0
votes
0answers
22 views

Why does AppArmor not block a new application installed manually to /opt?

I have just installed some proprietary apps to /opt (by creating directories and extracting archives with binaries there). And these apps have had no problems reaching the Internet or doing anything ...
0
votes
0answers
10 views

How do I define an AppArmor policy by negation?

I am new to the Linux Security Module scene. What I want is to make it so that only particular applications can modify particular paths. Since AppArmor is LSM that Ubuntu's kernel uses, since AppArmor ...
0
votes
0answers
20 views

Does apparmor in enforce mode still logs?

I'm using apparmor with Firefox (enforce). I know that leaving in complain mode, apparmor will log what a certain program is doing. But I would like to know if it's possible to turn the "enforce" ...
0
votes
0answers
60 views

Cannot update ClamAV via freshclam after installing apparmor

I searched but didn't find an exact answer ... here is my problem: Until now updating freshclam virus definitions for clamav was fine, but after installing apparmor, freshclam does not update. I get ...
0
votes
0answers
52 views

apparmor breaks the phone?

I've tried to remove apparmor (using apt-get remove apparmor from terminal) and now the phone doesn't boot anymore. Any idea how to repair it? The apparmor didn't seem to get removed completely due an ...
0
votes
0answers
29 views

Ubuntu AppArmor default profiles

Could anyone please list aa-status for fresh (or simply with AppArmor unchanged) installation of Ubuntu 15.04? I set up to much profiles from packages and need to bring it do default state.
0
votes
0answers
88 views

Firefox Says it's Not the Default Browser & App Armor Preventing Setting Default

Ever since upgrading to Vivid, every time I start Firefox it tells me that Firefox is not my default browser, and asks if I would like to set it as the default. The odd thing is that when I go to ...
0
votes
0answers
73 views

Why does dnsmasq use /bin/dash?

I am running apparmor in enforce mode for most profiles, and I regularly see denied messages like the following one: apparmor="DENIED" operation="exec" profile="/usr/sbin/dnsmasq" name="/bin/dash" ...
0
votes
0answers
90 views

Allow sudo in default guest account

I am trying to run Microsoft Office for some public workstations. I have added the following entry to my sudoers file: %win ALL=(windows) NOPASSWD: /usr/share/playonlinux/ /home/windows/.PlayOnLinux ...
0
votes
0answers
21 views

Setting up logging preferences for bind on 14.04 Server

Is there a preferred way of setting up logging preferences for bind in Ubuntu Server 14.04? I'm trying to add category lame-servers { null; }; But I'm getting a bit confused with different ...
0
votes
0answers
43 views

Start mySQL with AppArmor on reboot

When my Ubuntu server (hosted by Rackspace) is rebooted/restarted, mySQL starts automatically as evidenced by phpMyAdmin working properly. However, my PHP code does not appear to work. When I manually ...
0
votes
0answers
75 views

Apparmor problems

I followed this persons solved question here on how to mount Apparmor: https://forum.backbox.org/general-support/apparmor-is-not-working/. After I did however, I came up with this black screen with ...
0
votes
0answers
78 views

Can you use QProcess in a Click Packaged Application?

I am just curious whether this is something AppArmor allows or not? My application works fine on the desktop, but I can't get Standard output or error to even display in my app when I run it from the ...