Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with apparmor
Search options answers only
not deleted
user 106285
A filesystem-independent Linux kernel security module enabling Mandatory Access Control (MAC).
0
votes
Replace application's AppArmor profile without process restart
From the Ubuntu Community Wiki:
AppArmor can only track and protect processes that are started after the kernel module has been loaded. … After the apparmor packages have been installed, apparmor will be started. But running processes won't be protected by AppArmor. Either restarting the processes or rebooting will fix this. …
- 67.3k
1
vote
How do AppArmor and systemd access controls compare?
AppArmor, on the other hand, is a type of Mandatory Access Control. It is extremely fine-grained and allows path-based access restrictions with wildcard support. … For more information, read the AppArmor documentation and the manpage for systemd.exec. …
- 67.3k
1
vote
Apparmor profile denying read access with r flag
Did you both reload AppArmor and restart the application? Simply reloading AppArmor does not mean changes to the policy will take effect immediately. …
- 67.3k
3
votes
Accepted
Can too restrictive Linux MAC policy decrease security?
I suggest you look into AppArmor abstractions which allow the inclusion of sub-policies with specific purposes, such as whitelisting audio access. … This makes AppArmor policies significantly simpler than they otherwise would be, while still maintaining a high level of security. Many MAC architectures support a similar feature. …
- 67.3k
30
votes
Docker: when to use apparmor vs seccomp vs --cap-drop
AppArmor is a Mandatory Access Control framework that functions as an LSM (Linux Security Module). It is used to whitelist or blacklist a subject's (program's) access to an object (file, path, etc.). … AppArmor may be used to allow a program to have read access to /etc/passwd, but not /etc/shadow. The policies can also be used to restrict capabilities, or even limit network access. …
- 67.3k