Country:
(US)Total Posts: 404
AppArmor
| AppArmor (“Application Armor”) is a security module for the Linux kernel, released under the GNU General Public License. AppArmor allows the system administrator to associate with each program a security profile that restricts the capabilities of that program. It supplements the traditional Unix discretionary access control (DAC) model by providing mandatory access control (MAC). Install $ sudo apt-get install apparmor-profiles Basic Usage The apparmor-utils package contains command line utilities that you can use to change the AppArmor execution mode, find the status of a profile, create new profiles, etc.
sudo apparmor_status
sudo aa-complain /path/to/bin
sudo aa-enforce /path/to/bin
sudo aa-complain /etc/apparmor.d/* To place all profiles in enforce mode: sudo aa-enforce /etc/apparmor.d/*
cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a To reload a profile: cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r
sudo /etc/init.d/apparmor reload
sudo /etc/init.d/apparmor stop sudo update-rc.d -f apparmor remove
$ sudo /etc/init.d/apparmor start $ sudo update-rc.d apparmor defaults |
||
Size: |
1Mb | |
| Share | |
|
 |
