VehiclesFashionRecipesBlogsHuntTravelsSportFunHandmadeITEducation
Mini-Games
x

x
zakruti.com » IT - Software » IT, programs, coding
What is AppArmor - AppArmor commands - Chris Titus Tech

What is AppArmor - AppArmor commands - Chris Titus Tech

FBTwitterReddit

video description

Rating: 4.0; Vote: 1
What is AppArmor - AppArmor commands - Chris Titus Tech In this video, you will learn what is AppArmor, how to use it, and basic AppArmor commands. AppArmor is basically the Debian alternative to RHEL's SELinux. systemctl status apparmor # Checks status of the AppArmor service and tells you if it is enabled on boot https://medium.com/information-and-technology/so-what-is-apparmor-64d7ae211ed sudo aa-status 3 modes -enforcing -complain -unconfined aa-genprof program.sh Scan then Inherit: Creates a rule that is denoted by -ix- within the profile, causes the executed binary to inherit permissions from the parent profile. Child: Creates a rule that is denoted by -Cx- within the profile, requires a sub-profile to be created within the parent profile and rules must be separately generated for this child (prompts will appear when running scans on the parent). Deny: Creates a rule that AppArmor prepends with -deny- at the start of the line within the profile, causes the parents access to the resource be denied. Abort: Exits the AppArmor program without saving any changes. Finish: Exits the AppArmor program but WILL save changes. aa-logprof Checks for program updates
Date: 2022-03-20

Comments and reviews: 6


During profile creation, you are supposed to run the app/script before scan of logs. In your case, as you did run the fixcam script right after login, any app armor warnings are already in the log, so the scan would probably pick that up from history, but your how-to is sort of showing it wrong. The prompt text also says so, to run the app/script in other window -now- before doing the scan of logs. (your pinned comment is like -post fix- of situations when the proposed approach hits its limits) ... still nice video, providing good base.
reply

if apparmor is installed on whonix by default, doesnt that mean you just need to download the profiles? out of the box I have 17 profiles when running aa-status. After running the download of profiles i now have 49 loaded and 29 enforced. i assume that is all i need to do to complete this security recommendation.
reply

One thing I didn't include in this video but is very important when creating a new profile:
1. RE-RUN the script after setting it up
2. If it errors, run aa-logprof
3. Inherit and Save Changes
4. Repeat until you see no errors.
This is also important to do if the script or program stops working.

reply

Thanks! That was interesting. I'm running Ubuntu servers and somehow had no time to dig into this topic. A video is a more accessible form so this gives a good start. I add it to my server notes together with your additional comment. Thanks again! Great video!
reply

Used to selinux but recently started using multi linux o.s. and comes preloaded on parrot security o.s. Thanks for taking the time to make the video. Found it very helpful.
reply

Would you please consider changing your screen resolution or at least increase your font size so what you have on your screen is legible? Tnx
reply
Add a review, comment






Other channel videos