The apparmor tag has no wiki summary.
3
votes
1answer
56 views
Is apparmor decreasing the system performance
Is AppArmor decreasing the system performance? Or it doesn't affect it at all. I have a slow system (900mhz cpu) which has AppArmor because it was installed by default I would like to know if it ...
2
votes
0answers
18 views
LXC apparmor profile limits executing scripts in /run/*
LXC is blocking a trusted container from running scripts in /run/*, how do I configure LXC to allow scripts to run here?
1
vote
0answers
40 views
apparmor and Firefox
I am currently re-setting up the apparmor profile for Firefox 19.0.2 on Ubuntu 12.04 and I am slightly confused. I must of had Firefox 7.01 last time I used this and if I do apparmor_status then ...
5
votes
9answers
260 views
How to prevent a process from writing files
I want to run a command on Linux in a way that it cannot create or open any files to write. It should still be able to read files as normal (so an empty chroot is not an option), and still be able to ...
2
votes
0answers
34 views
Unable to use aa-genprof without compatibility patch
I run 3.6.10 kernel,
It seems like apparmor compatibility patch were dropped in latest kernel, so aa-genprof won't work anymore, any suggestions?
Looks like aa-status or other aa- commands were ...
0
votes
1answer
57 views
Fix this apparmor rule?
I don't really know how to add this rule to the profile, since the name was "wired", it's not some absolute path on my system,
kernel: type=1400 audit(1353749970.556:556): apparmor="ALLOWED"
...
4
votes
1answer
757 views
Evince fails to start because it cannot read .Xauthority
I'm logged in remotely over SSH with X forwarding to a machine running Ubuntu 10.04 (lucid). Most X11 applications (e.g. xterm, gnome-terminal) work fine. But Evince does not start. It seems unable to ...
11
votes
3answers
340 views
Prompt user on Linux security denial
Is it possible to make a Linux security module (eg. AppArmor, SELinux etc.) prompt the user, when an application wants to access classified files or folders (digital signatures, SSH keys, credit card ...
4
votes
1answer
862 views
How can I run tcpdump from a Python script without AppArmor complaining?
For inconvenient reasons going beyond the scope of this question, I have to run tcpdump from within a Python script. I currently just call subprocess.Popen(['tcpdump', ...) and everything works just ...
1
vote
2answers
860 views
VirtualBox guest hangs when: Starting Apparmor profiles
I have a Fedora 14. I installed the Ubuntu 11.04 i386 mini.iso in Virtualbox. After install when I reboot it it just hangs with this message:
/dev/mapper/vg-root: tiszta, 52354/5103616 fájl, ...
