The tag has no usage guidance.

learn more… | top users | synonyms

3
votes
0answers
204 views

AppArmor Profile: Deny internet access

I want to deny the internet permission for some applications. Therefore, I tried first to deny the internet permission for ping, but it doesn't work. Here is the profile of /etc/apparmor.d/bin.ping ...
2
votes
0answers
19 views

Can AppArmor restrict access to a specific interface?

A deceptively simple question; Can Apparmor on Ubuntu (any release) restrict network access for a specific application to a specific network interface? If it can; an example/tutorial/etc link would ...
2
votes
0answers
29 views

AppArmor: make it ask me for decision to allow/disallow

I'm having fun writing AppArmor profile for firefox. I like to open downloaded files directly from firefox (by double-click on it), it is really convenient. But then firefox should have permissions ...
2
votes
0answers
87 views

LXC apparmor profile limits executing scripts in /run/*

LXC is blocking a trusted container from running scripts in /run/*, how do I configure LXC to allow scripts to run here?
2
votes
0answers
90 views

Unable to use aa-genprof without compatibility patch

I run 3.6.10 kernel, It seems like apparmor compatibility patch were dropped in latest kernel, so aa-genprof won't work anymore, any suggestions? Looks like aa-status or other aa- commands were ...
1
vote
0answers
58 views

what is apparmor “profile_replace” log message

Can anyone explain this line in the log.smbd? Searching the internet for apparmor details gets so many hits I cannot find the information. This occurs when smbd is started. kernel: [908896.070790] ...
1
vote
0answers
20 views

Using apprarmor/grsec to gain capabilities for file

I know that using apparmor, one can reduce process capabilities(7). But is it possible to gain them? For example: ping requires CAP_NET_RAW. It's binary has no suid set and doesn't have any file ...
0
votes
0answers
28 views

Is apparmor preventing the running of my application?

I have an application that runs on Ubuntu and used to run on Tails. But now with Tails 1.5 it does not run anymore on Tails. My application package is basically a directory containing the ...