Tag Info

New answers tagged

0

I finally found a better solution than using the unconfined template. It was easier than expected... only needed to include "video" as part of the policy group: "policy_groups": [ ... "networking", "video", ... ] If, aditionally, you need to access video files, you can also add "video_files_read" (only read video ...


0

The easiest way is to import and subsequently export they key without using the --ascii flag. Import the key gpg --import 4secret-key.asc If you don't know the key id, look it up gpg --list-secret-keys Export the public key, storing it in a file gpg --export [key-id] >public-key.gpg If you don't want to import the key to your keyring, set ...


1

Is it possible to block it for all users including root but whitelist SOMEUSERNAME internet access? Can be done with iptables: iptables -A OUTPUT -m owner --uid-owner SOMEUSERNAME -j ACCEPT iptables -A OUTPUT -j REJECT This is not very nuanced. Of course, the root user can go ahead and rewrite the iptables rules to give itself permission. You can ...


0

I have the same issue but I just checked and /etc/apparmor.d/system_tor is present in my system. What it looks to be the cause of the problem is the init script /etc/init.d/tor that is calling aa-exec in a wrong way ( at least it is not working ): Solution: Edit /etc/init.d/tor At line 159 you should have this: AA_EXEC_ARGS="--profile=system_tor -- ...


1

You could try to run your application with the unconfined template. In your application manifest file you should have the following lines: "hooks": { "myapp": { "apparmor": "myapp.json", "desktop": "myapp.desktop" } }, Then in the myapp.json apparmor profile, use the following snippet: { "policy_groups": [], ...



Top 50 recent answers are included