Questions tagged [apparmor]

A filesystem-independent Linux kernel security module enabling Mandatory Access Control (MAC).

3 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
1answer
66 views

Opt-in a security profile at runtime, without tedious setup

I like lowering my access privilege mid-program (e.g. restrict my program to the current directory and files, disable networking). I imagine this is a pretty common wish. I would like to be able to ...
2
votes
1answer
93 views

Replace application's AppArmor profile without process restart

I'm using AppArmor in complain mode for a process in our production environment and I see some false positive profile violations in my logs. I'd like to roll out an updated profile but I cannot ...
0
votes
0answers
34 views

Determining which files a process modifies / creates with strace?

For purposes of setting up AppArmor or SE Linux, I'm looking to audit what files a program could possibly need access to. My understanding is that the end of AppArmor or SE Linux, is to constrain ...