The tag has no usage guidance.

learn more… | top users | synonyms

10
votes
2answers
565 views

Simplest possible secure sandboxing (limited resources needed)

I'm working on a project that implements distributed simulations: arbitrary code is executed on multiple nodes and the results are later collected and aggregated. Each node is an instance of an ...
1
vote
1answer
26 views

Using apprarmor/grsec to gain capabilities for file

I know that using apparmor, one can reduce process capabilities(7). But is it possible to gain them? For example: ping requires CAP_NET_RAW. It's binary has no suid set and doesn't have any file ...
3
votes
0answers
251 views

AppArmor Profile: Deny internet access

I want to deny the internet permission for some applications. Therefore, I tried first to deny the internet permission for ping, but it doesn't work. Here is the profile of /etc/apparmor.d/bin.ping /...
2
votes
0answers
64 views

apparmor - cannot load library

I'm trying to get apparmor set up on my system and am having troubles getting past the permission denied error: ping: error while loading shared libraries: libcap.so.2: cannot stat shared object: ...
2
votes
0answers
27 views

Can AppArmor restrict access to a specific interface?

A deceptively simple question; Can Apparmor on Ubuntu (any release) restrict network access for a specific application to a specific network interface? If it can; an example/tutorial/etc link would ...
2
votes
0answers
30 views

AppArmor: make it ask me for decision to allow/disallow

I'm having fun writing AppArmor profile for firefox. I like to open downloaded files directly from firefox (by double-click on it), it is really convenient. But then firefox should have permissions ...
2
votes
0answers
89 views

LXC apparmor profile limits executing scripts in /run/*

LXC is blocking a trusted container from running scripts in /run/*, how do I configure LXC to allow scripts to run here?
2
votes
0answers
91 views

Unable to use aa-genprof without compatibility patch

I run 3.6.10 kernel, It seems like apparmor compatibility patch were dropped in latest kernel, so aa-genprof won't work anymore, any suggestions? Looks like aa-status or other aa- commands were ...
0
votes
0answers
35 views

Is apparmor preventing the running of my application?

I have an application that runs on Ubuntu and used to run on Tails. But now with Tails 1.5 it does not run anymore on Tails. My application package is basically a directory containing the application,...