2
votes
1answer
201 views

Anyway to use Skype in AppArmor?

Ubuntu 14.04 and Skype 4.2 installed. I've set up AppArmor using the Skype AppArmor profile from this wiki. When I use AppArmor with Skype, it has no audio. Is anyone using AppArmor successfully with ...
1
vote
1answer
514 views

Contain Docker Engine with AppArmor

In face of the reminders that the Docker Engine should be run contained with AppArmor or SELinux, how to run Docker under AppArmor on Ubuntu 14.04? The Docker Security documentation and the LXC ...
5
votes
1answer
165 views

Can apparmor restrict interpreted languages?

For interpreted/vm languages(e.g. python, java, shell scripts) can apparmor be set to only confine a particular script or program? If so, how?
1
vote
2answers
328 views

How to display AppArmor denied messages as desktop notifications

How can I get live notifications on my desktop whenever an AppArmor denied message is triggered?
4
votes
1answer
191 views

Preventing a specific application from accessing a folder

I just installed an application that has the bad habit of automatically scanning all my folders for files to edit. The app has no available options to disable this behavior. I cannot just remove ...
56
votes
3answers
7k views

What is apparmor?

I hear a lot of talk about apparmor, I want to know the following: What is apparmor? How does apparmor work?
13
votes
2answers
898 views

How can I tell that apparmor is working?

Some questions I want answered in the answer: How do I know if apparmor is running? How can I tell if it's working well?
7
votes
2answers
330 views

How does AppArmor deal with non-profiled Programs?

I setup and configured AppArmor in Ubuntu and I would like to know how AppArmor deals with Packages and Applications which have no AppArmor Profile? After installing the package with sudo apt-get ...
1
vote
1answer
341 views

Is there a good apparmor profile for VirtualBox?

Is there any apparmor profile for VirtualBox that works both in normal and guest accounts for 12.04? Where can I get it? Or maybe its code? Is there any other way to protect my VirtualBox from ...
5
votes
1answer
136 views

How do I create a default fallback profile for any process that doesn't have one in AppArmor?

Is there a way to specify a default profile on any executable that doesn't have a profile already defined? The idea is to avoid any unconstrained processes.
4
votes
1answer
3k views

Where do I get the AppArmor 2.4 compatibility patch?

I just compiled the 2.6.39-rc1 kernel and AppArmor complains about a missing /sys interface (plus, it slows down the boot). Where do I get the AppArmor 2.4 compatibility patch AppArmor asks for?
13
votes
5answers
19k views

How to secure ubuntu server from bruteforce ssh attacks?

I have my passwords secure, but I heard people complaining about perfomance of a server going down drastically when a bruteforce attack is taking place. How can I secure my ubuntu 10.10 server from ...
6
votes
1answer
553 views

Is troubleshooting AppArmor with 'teardown' unsafe?

I understand there is a safer, more targeted way to troubleshoot AppArmor's possible contribution to an issue than completely stopping the service and tearing down AppArmor profiles. Can someone give ...
13
votes
2answers
1k views

Is it a bad idea to run SELinux and AppArmor at the same time?

My corporate policy says that Linux boxes must be secured with SELinux (so that a security auditor can check the 'yes, we're extremely secure!' checkbox for each server). I had hoped to take ...